Insufficient Verification of Data Authenticity
CVE-2024-7980
Summary
Insufficient data validation in Installer in Google Chrome on Windows versions prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a crafted symbolic link.
- LOW
- LOCAL
- HIGH
- UNCHANGED
- REQUIRED
- NONE
- HIGH
- HIGH
CWE-345 - Insufficient Verification of Data Authenticity
The software does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
References
Advisory Timeline
- Published
