CVE-2024-7017 — Race Condition in Google Chrome

CWE-362 — Race ConditionCWE-250 — Execution with Unnecessary Privileges6 documents6 sources
Severity
7.5HIGHNVD
EPSS
0.1%
top 76.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Google ChromeChromium
Timeline
PublishedNov 14

Description

Inappropriate implementation in DevTools in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.6 | Impact: 5.9

Affected Packages3 packages

▶CVEListV5google/chrome126.0.6478.182 — 126.0.6478.182
▶NVDgoogle/chrome< 126.0.6478.182
▶Debianchromium/chromium< 126.0.6478.182-1~deb12u1+2

🔴Vulnerability Details

3
CVEList
CVE-2024-7017: Inappropriate implementation in DevTools in Google Chrome prior to 126↗2025-11-14
▶
GHSA
GHSA-g4hf-8p4f-p7g3: Inappropriate implementation in DevTools in Google Chrome prior to 126↗2025-11-14
▶
OSV
CVE-2024-7017: Inappropriate implementation in DevTools in Google Chrome prior to 126↗2025-11-14
▶

📋Vendor Advisories

2
Red Hat
chromium-browser: Inappropriate implementation in DevTools↗2025-11-14
▶
Debian
CVE-2024-7017: chromium - Inappropriate implementation in DevTools in Google Chrome prior to 126.0.6478.18...↗2024
▶
CVE-2024-7017 — Race Condition in Google Chrome | cvebase