Skip to content
OpenAdvisories
High · 7.8 CVE-2024-1694 EUVD-2024-17428GHSA-f3qr-vg6c-j699

Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to bypass discretionary access…

Published Jun 7, 2024 · Updated Mar 14, 2025 · Assigned by Chrome

Vendor: Google Product: Omaha

Description

Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to bypass discretionary access control via a malicious file. (Chromium security severity: High)

Affected products

VendorProductAffectedFixed
Google Omaha 1.3.36.351 – < 1.3.36.351 1.3.36.351

References