CVE-2024-1671 - Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page

Back Back to CVE browser

MEDIUM

Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page

Published Feb 21, 2024

6.5

MEDIUM

CVSS 3.1

EPSS 0.75%

Description

Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)

Affected products

Vendor Google Product Chrome Default
unknown
Affected
- ≥ 122.0.6261.57, < 122.0.6261.57

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Google	Chrome	unknown	Affected ≥ 122.0.6261.57, < 122.0.6261.57

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-693

References (5)

https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html
Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-17406
Advisory
https://issues.chromium.org/issues/41487933
Issue TrackingVendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PWWBMVQTSERVBXSXCZVUKIMEDNQUQ7O3/
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QDCMYQ3J45NHQ4EJREM3BJNNKB5BK4Y7/
Mailing List

Link	Providers	Tags
https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html		Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-17406		Advisory
https://issues.chromium.org/issues/41487933		Issue TrackingVendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PWWBMVQTSERVBXSXCZVUKIMEDNQUQ7O3/		Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QDCMYQ3J45NHQ4EJREM3BJNNKB5BK4Y7/		Mailing List

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Chrome

Published Feb 21, 2024

Updated Mar 27, 2025

Reserved Feb 20, 2024

Link CVE-2024-1671

CISA Vulnrichment

Updated Feb 21, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2024-1671

Red Hat

No data

ENISA EUVD

Assigner Chrome

Published Feb 21, 2024

Updated Mar 27, 2025

Link EUVD-2024-17406

GitHub

No data