CVE-2024-7017: Inappropriate implementation in DevTools
Inappropriate implementation in DevTools in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 126.0.6478.182
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-7017?
CVE-2024-7017 has a high severity rating as it allows potential sandbox escape via a crafted HTML page.
How do I fix CVE-2024-7017?
To fix CVE-2024-7017, update Google Chrome to version 126.0.6478.182 or later.
Who is affected by CVE-2024-7017?
CVE-2024-7017 affects users of Google Chrome versions prior to 126.0.6478.182.
What type of attack does CVE-2024-7017 involve?
CVE-2024-7017 involves a potential remote attack that can perform a sandbox escape.
What is the impact of CVE-2024-7017?
The impact of CVE-2024-7017 could lead to unauthorized access and control over the affected system through the sandbox escape.