Lucene search

K
freebsdFreeBSDEC8E4040-AFCD-11EE-86BB-A8A1599412C6
HistoryJan 09, 2024 - 12:00 a.m.

chromium -- security fix

2024-01-0900:00:00
vuxml.freebsd.org
20
chromium
security
update
fix
high-risk
data validation
extensions
cve-2024-0333
malcolm stagg
sodium-24

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

21.8%

Chrome Releases reports:

This update includes 1 security fix:

[1513379] High CVE-2024-0333: Insufficient data validation in Extensions. Reported by Malcolm Stagg (@malcolmst) of SODIUM-24, LLC on 2023-12-20

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchchromium< 120.0.6099.216UNKNOWN
FreeBSDanynoarchungoogled-chromium< 120.0.6099.216UNKNOWN

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

21.8%