vulnerability

Microsoft Edge Chromium: CVE-2024-3840 Insufficient policy enforcement in Site Isolation

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:C/A:N)
Published
04/17/2024
Added
04/19/2024
Modified
01/28/2025

Description

Insufficient policy enforcement in Site Isolation in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

Solution

microsoft-edge-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.