Home Google CVE-2024-7977
Back to Google

CVE-2024-7977

Google Chrome

Google CVSS 7.8 Updated March 15, 2026

Executive Risk Summary

"A local attacker could exploit the insufficient data validation vulnerability in the Installer component of Google Chrome on Windows to perform privilege escalation via a malicious file. This vulnerability is rated as Medium severity by Chromium and is addressed in Google Chrome version 128.0.6613.84."

Operational Audit Arsenal

Target Type Executable
Target Asset Installer
Standard Path %ProgramFiles%\Google\Chrome\Application
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: Installer (Executable)
$Targets = 'Installer'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Likely

Web browsing service affected

Internal Work Notes

Apply Google Chrome update to version 128.0.6613.84 or later to mitigate privilege escalation vulnerability in the Installer component.

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related Google Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.