VULNERABILITY INTELLIGENCE

CVE-2024-1672

CVSS score8.8 HIGH

EPSS probability0.88%

CISA KEVNot currently listed

Published2024-02-21

Last modified2026-06-17

Description

Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)