CVE-2024-1694

Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to bypass discretionary access control via a malicious file. (Chromium security severity: High)

Score

CVSS 3.1 7.8 High

Status

Modified - chrome-cve-admin@google.com

Published

2024-06-07

Last modified

2025-03-14

Weaknesses

CWE-474

Affected products

• Omaha (Google)
• Updater (Google)

References

• https://issues.chromium.org/issues/40946325