Lucene search
HistoryJul 16, 2024 - 11:15 p.m.
CVE-2024-3173
insufficient data validation
google chrome
updater
os-level privilege escalation
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
26.5%
Insufficient data validation in Updater in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)
Affected configurations
Node
googlechromeRange<120.0.6099.62
Related
cvelist
cvelist
CVE-2024-3173
2024-07-16 22:14:03
debiancve
debiancve
CVE-2024-3173
2024-07-16 23:15:24
cve
cve
CVE-2024-3173
2024-07-16 23:15:24
vulnrichment
vulnrichment
CVE-2024-3173
2024-07-16 22:14:03
openvas
openvas
Debian: Security Advisory (DSA-5573-1)
2023-12-11 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2023-12-05 00:00:00
kaspersky
kaspersky
KLA62281 Multiple vulnerabilities in Google Chrome
2023-12-05 00:00:00
redos
redos
ROS-20240724-01
2024-07-24 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
26.5%
Related for NVD:CVE-2024-3173