VULNERABILITY INTELLIGENCE

CVE-2024-1671

CVSS score6.5 MEDIUM

EPSS probability0.75%

CISA KEVNot currently listed

Published2024-02-21

Last modified2026-06-17

Description

Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)