VULNERABILITY INTELLIGENCE

CVE-2024-11110

CVSS score6.5 MEDIUM

EPSS probability0.39%

CISA KEVNot currently listed

Published2024-11-12

Last modified2026-06-17

Description

Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. (Chromium security severity: High)