Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-12024
HistoryJan 12, 2023 - 12:00 a.m.

Google Chrome Input Validation Error Vulnerability (CNVD-2023-12024)

2023-01-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
11

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Google Chrome is a web browser from Google, Inc. An input validation error vulnerability exists in Google Chrome, which stems from inadequate validation of untrusted input in downloads and can be exploited by remote attackers to bypass download restrictions via crafted HTML pages.

CPENameOperatorVersion
google chrome <109.eq0.5414.74

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N