VDB
CVE-2023-7261
CVE-2023-7261
PUBLISHED
CVSS 8.5 HIGH
Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: High)
EPSS 0.16% · 5.3th percentile
Risk Scores
CVSS 4.0
8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS Score
0.16%
5.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| updater | 0, 0, 0 | |
| Omaha | 1.3.36.271, 1.3.36.271 | |
| omaha | 0, 0 |
Timeline
- Jun 7, 2024 CVE Published
- Jun 8, 2024 EPSS Score
- Jul 1, 2024 EPSS Score
- Jul 3, 2024 CVE Updated
- Jul 25, 2024 EPSS Score
- Aug 17, 2024 EPSS Score
- Sep 10, 2024 EPSS Score
- Oct 3, 2024 EPSS Score
- Oct 5, 2024 Coalition ESS Score
- Oct 26, 2024 EPSS Score
- Nov 16, 2024 PoC Published
- Nov 17, 2024 PoC Published