CVE-2024-3173
16.07.2024, 23:15
Insufficient data validation in Updater in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)Enginsight
| Vendor | Product | Version |
|---|---|---|
| chrome | 𝑥 < 120.0.6099.62 |
𝑥
= Vulnerable software versions
Debian Releases
Common Weakness Enumeration
- CWE-345 - Insufficient Verification of Data AuthenticityThe software does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
- CWE-20 - Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.