CVE-2024-7979

Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a crafted symbolic link. (Chromium security severity: Medium)

Score

CVSS 3.1 7.8 High

Status

Analyzed - chrome-cve-admin@google.com

Published

2024-08-21

Last modified

2024-08-22

Weaknesses

CWE-345

Affected products

• Chrome (Google)

References

• https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html
• https://issues.chromium.org/issues/356064205