← Database

CVE-2024-7977

HIGH CVSS: 7.8 Published: 2024-08-21 Modified: 2026-06-17

Description

Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Medium)

Affected Platforms

Microsoft WindowsGoogle Chrome

Weakness Type

NVD-CWE-noinfo, CWE-20

References