CVE-2024-0804
Chromium: CVE-2024-0804 Insufficient policy enforcement in iOS Security UI
CVE-2024-0804 is fixed in 4 products on 2 platforms, first by DSA-5607-1, released January 24, 2024. It is not reported as exploited. Patch Radar priority: High.
HighFixed on 2 platforms
CVSS
7.5
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0049
42nd percentile
<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2024">Google Chrome Releases</a> for more information.</p>
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Windows apps | |||
| Microsoft Edge | 121.0.2277.112 | Microsoft Edge 121.0.2277.112 | Feb 5, 2024 |
| Microsoft Edge Beta | 127.0.2651.8 | Microsoft Edge Beta 127.0.2651.8 | Jun 21, 2024 |
| Microsoft Edge Dev | 127.0.2651.8 | Microsoft Edge Dev 127.0.2651.8 | Jun 21, 2024 |
| Linux | |||
| chromium · Debian 12.15 (bookworm) | 121.0.6167.85-1~deb12u1 | DSA-5607-1 | Jan 24, 2024 |
| chromium · Debian 13.5 (trixie) | 121.0.6167.85-1 | DEBIAN-CVE-2024-0804 | Jan 24, 2024 |
| chromium · Debian 14 | 121.0.6167.85-1 | DEBIAN-CVE-2024-0804 | Jan 24, 2024 |