Lucene search
MicrosoftMS:CVE-2024-1672HistoryFeb 23, 2024 - 6:57 p.m.
Chromium: CVE-2024-1672 Inappropriate implementation in Content Security Policy
2024-02-2318:57:23
Microsoft
msrc.microsoft.com
13
chromium
cve-2024-1672
content security policy
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
Low
EPSS
0
Percentile
15.5%
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Affected configurations
Node
microsoftedge_chromiumRange<122.0.2365.52
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | edge_chromium | * | cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:* |
Related
alpinelinux
alpinelinux
CVE-2024-1672
2024-02-21 04:15:08
nvd
nvd
CVE-2024-1672
2024-02-21 04:15:08
vulnrichment
vulnrichment
CVE-2024-1672
2024-02-21 03:14:43
debiancve
debiancve
CVE-2024-1672
2024-02-21 04:15:08
cnvd
cnvd
Google Chrome Security Bypass Vulnerability (CNVD-2024-16936)
2024-03-01 00:00:00
veracode
veracode
Bypassing Content Security Policy
2024-02-26 08:25:45
cve
cve
CVE-2024-1672
2024-02-21 04:15:08
prion
prion
Information disclosure
2024-02-21 04:15:00
ubuntucve
ubuntucve
CVE-2024-1672
2024-02-21 00:00:00
cvelist
cvelist
CVE-2024-1672
2024-02-21 03:14:43
osv
osv
CVE-2024-1672
2024-02-21 04:15:08
chromium - security update
2024-02-23 00:00:00
chromedriver-122.0.6261.111-1.1 on GA media
2024-06-15 00:00:00
openvas
openvas
fedora
fedora
[SECURITY] Fedora 38 Update: chromium-122.0.6261.57-1.fc38
2024-02-25 01:26:42
[SECURITY] Fedora 39 Update: chromium-122.0.6261.57-1.fc39
2024-02-23 01:26:12
nessus
nessus
Google Chrome < 122.0.6261.57 Multiple Vulnerabilities
2024-02-20 00:00:00
Fedora 38 : chromium (2024-6a879cfa63)
2024-02-25 00:00:00
Google Chrome < 122.0.6261.57 Multiple Vulnerabilities
2024-02-20 00:00:00
freebsd
freebsd
chromium -- multiple security fixes
2024-02-20 00:00:00
debian
debian
[SECURITY] [DSA 5629-1] chromium security update
2024-02-23 06:27:13
chrome
chrome
Stable Channel Update for Desktop
2024-02-20 00:00:00
kaspersky
kaspersky
KLA64091 Multiple vulnerabilities in Google Chrome
2024-02-20 00:00:00
KLA64520 Multiple vulnerabilities in Microsoft Browser
2024-02-23 00:00:00
redos
redos
ROS-20240507-09
2024-05-07 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.7
Confidence
Low
EPSS
0
Percentile
15.5%
Related for MS:CVE-2024-1672