{"id":"CVE-2023-7261","aliases":["EUVD-2023-59655","GHSA-4586-3357-8wqx"],"status":"published","title":"Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a...","description":"Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: High)","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00162,"percentile":0.05356,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-233"],"published":"2024-06-07T20:09:06Z","modified":"2026-06-17T06:52:25Z","exploits":[{"source":"pocgithub","id":"zerozenxlabs/CVE-2023-7261","title":"zerozenxlabs/CVE-2023-7261","date":"2024-11-14","url":"https://github.com/zerozenxlabs/CVE-2023-7261"}],"products":[{"vendor":"google","product":"omaha"},{"vendor":"google","product":"updater"}],"references":[{"url":"https://issues.chromium.org/issues/40064602","tags":["x_transferred","Exploit","Issue Tracking"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-7261"},{"url":"https://github.com/advisories/GHSA-4586-3357-8wqx"}],"sources":{"cve":[{"id":"CVE-2023-7261","description":"Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: High)","status":"published","published":"2024-06-07T20:09:06.392Z","modified":"2025-03-14T19:21:19.509Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-233"],"updated_at":"2026-11-02T14:35:33.794347Z"}],"euvd":[{"id":"EUVD-2023-59655","description":"Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: High)","status":"published","published":"2024-06-07T20:09:06Z","modified":"2025-03-14T19:21:19Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:53:02.719002Z"}],"ghsa":[{"id":"GHSA-4586-3357-8wqx","title":"Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a...","description":"Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: High)","status":"published","published":"2024-06-07T21:31:55Z","modified":"2024-07-03T18:44:19Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-233"],"updated_at":"2026-11-02T14:57:37.066336Z"}],"nvd":[{"id":"CVE-2023-7261","description":"Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: High)","status":"published","published":"2024-06-07T20:15:10.887Z","modified":"2026-06-17T06:52:25.837Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-233"],"updated_at":"2026-11-02T14:09:17.205287Z"}]}}