AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-52928

CRITICAL · CVSS 9.6 EPSS 0.41%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-06-26 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.6. It affects Windows.

CVE
CVE-2024-52928
Severity
CRITICAL
CVSS
9.6
EPSS
0.41%
Windows

Original NVD Description

Arc before 1.26.1 on Windows has a bypass issue in the site settings that allows websites (with previously granted permissions) to add new permissions when the user clicks anywhere on the website.

Related CVEs

Other vulnerabilities affecting the same vendor(s)