CVE-2024-7017
published 2025-11-14CVE-2024-7017: Inappropriate implementation in DevTools in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a…
PriorityP340high7.5CVSS 3.1
AVNACHPRNUIRSUCHIHAH
EPSS
0.19%
9.4th percentile
Inappropriate implementation in DevTools in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chromium | chromium | >= 0 < 126.0.6478.182-1~deb12u1 | 126.0.6478.182-1~deb12u1 |
| chromium | chromium | >= 0 < 126.0.6478.182-1 | 126.0.6478.182-1 |
| chromium | chromium | >= 0 < 126.0.6478.182-1 | 126.0.6478.182-1 |
| debian | chromium | < chromium 126.0.6478.182-1~deb12u1 (bookworm) | chromium 126.0.6478.182-1~deb12u1 (bookworm) |
| chrome | < 126.0.6478.182 | 126.0.6478.182 | |
| chrome | >= 126.0.6478.182 < 126.0.6478.182 | 126.0.6478.182 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
chromium-browser: Inappropriate implementation in DevTools
vendor_redhat·2025-11-14·CVSS 7.5
CVE-2024-7017 [HIGH] CWE-250 chromium-browser: Inappropriate implementation in DevTools
chromium-browser: Inappropriate implementation in DevTools
Inappropriate implementation in DevTools in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Statement: Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.
Debian
CVE-2024-7017: chromium - Inappropriate implementation in DevTools in Google Chrome prior to 126.0.6478.18...
vendor_debian·2024·CVSS 7.5
CVE-2024-7017 [HIGH] CVE-2024-7017: chromium - Inappropriate implementation in DevTools in Google Chrome prior to 126.0.6478.18...
Inappropriate implementation in DevTools in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Scope: local
bookworm: resolved (fixed in 126.0.6478.182-1~deb12u1)
bullseye: open
forky: resolved (fixed in 126.0.6478.182-1)
sid: resolved (fixed in 126.0.6478.182-1)
trixie: resolved (fixed in 126.0.6478.182-1)
GHSA
GHSA-g4hf-8p4f-p7g3: Inappropriate implementation in DevTools in Google Chrome prior to 126
ghsa_unreviewed·2025-11-14
CVE-2024-7017 [HIGH] CWE-362 GHSA-g4hf-8p4f-p7g3: Inappropriate implementation in DevTools in Google Chrome prior to 126
Inappropriate implementation in DevTools in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
OSV
CVE-2024-7017: Inappropriate implementation in DevTools in Google Chrome prior to 126
osv·2025-11-14·CVSS 7.5
CVE-2024-7017 [HIGH] CVE-2024-7017: Inappropriate implementation in DevTools in Google Chrome prior to 126
Inappropriate implementation in DevTools in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-11-14
Published