Sandbox Escape Vulnerability in Google Chrome
CVE-2024-7017

7.5HIGH

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
14 November 2025

What is CVE-2024-7017?

A vulnerability in Google Chrome's DevTools, found prior to version 126.0.6478.182, could allow remote attackers to escape the confines of a sandbox through crafted HTML content. This could potentially enable unauthorized access to sensitive data or system resources, posing a significant risk to users who interact with malicious web pages. Properly updating the browser is essential to mitigate any exploitation attempts related to this flaw.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Chrome 126.0.6478.182

References

https://chromereleases.googleblog.com/2024/07/stable-chan...
https://issues.chromium.org/issues/338248595

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.