{"id":"CVE-2024-1694","aliases":["EUVD-2024-17428","GHSA-f3qr-vg6c-j699"],"status":"published","title":"Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a...","description":"Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to bypass discretionary access control via a malicious file. (Chromium security severity: High)","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00151,"percentile":0.0431,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-474"],"published":"2024-06-07T20:06:43Z","modified":"2026-06-17T07:04:48Z","products":[{"vendor":"google","product":"omaha"},{"vendor":"google","product":"updater"}],"references":[{"url":"https://issues.chromium.org/issues/40946325","tags":["x_transferred","Exploit","Issue Tracking"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1694"},{"url":"https://github.com/advisories/GHSA-f3qr-vg6c-j699"}],"sources":{"cve":[{"id":"CVE-2024-1694","description":"Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to bypass discretionary access control via a malicious file. (Chromium security severity: High)","status":"published","published":"2024-06-07T20:06:43.763Z","modified":"2025-03-14T19:00:49.399Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-474"],"updated_at":"2026-11-02T14:34:18.259965Z"}],"euvd":[{"id":"EUVD-2024-17428","description":"Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to bypass discretionary access control via a malicious file. (Chromium security severity: High)","status":"published","published":"2024-06-07T20:06:43Z","modified":"2025-03-14T19:00:49Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:53:02.719002Z"}],"ghsa":[{"id":"GHSA-f3qr-vg6c-j699","title":"Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a...","description":"Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to bypass discretionary access control via a malicious file. (Chromium security severity: High)","status":"published","published":"2024-06-07T21:31:55Z","modified":"2024-08-01T15:32:53Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-474"],"updated_at":"2026-11-02T14:57:48.682212Z"}],"nvd":[{"id":"CVE-2024-1694","description":"Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to bypass discretionary access control via a malicious file. (Chromium security severity: High)","status":"published","published":"2024-06-07T20:15:10.973Z","modified":"2026-06-17T07:04:48.48Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-474"],"updated_at":"2026-11-02T14:10:04.111836Z"}]}}