Lucene search

K
osvGoogleOSV:CVE-2024-0333
HistoryJan 10, 2024 - 10:15 p.m.

CVE-2024-0333

2024-01-1022:15:50
Google
osv.dev
6
data validation
google chrome
extension installation
crafted html page
privileged network position
security severity

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

AI Score

5.1

Confidence

Low

EPSS

0.001

Percentile

21.8%

Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to install a malicious extension via a crafted HTML page. (Chromium security severity: High)

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

AI Score

5.1

Confidence

Low

EPSS

0.001

Percentile

21.8%