issues.chromium.org
https://issues.chromium.org/issues/40064602 CVE-2023-7261
HIGH
Record summary
CVE-2023-7261 has a selected CVSS score of 7.8 (high); EIP currently links 1 repository PoC.
Description
Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: High)
Description source: CVE List
Exploitation context
Available material
- Repository PoCs
- 1
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 10, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Default status: unknown | CVE List | 1.3.36.271 to < 1.3.36.271 | affected |
| Before 1.3.36.351 | affected |
Proofs of concept
1Repository PoCs
GitHubzerozenxlabs/CVE-2023-7261Repository PoCby Nassim-AsrirStars: 6Not analyzed2 files
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-7261