VULNERABILITY INTELLIGENCE
CVE-2024-44099
CVSS score5.5 MEDIUM
EPSS probability0.08%
CISA KEVNot currently listed
Published2024-10-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
There is a possible Local bypass of user interaction due to an insecure default value. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Weakness classification
- nvd@nist.gov: CWE-863
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-863
Primary references
- dsap-vuln-management@google.com — Vendor Advisory