Lucene search
GoogleOSV:CVE-2024-3173HistoryJul 16, 2024 - 11:15 p.m.
CVE-2024-3173
2024-07-1623:15:24
Google
osv.dev
data validation
google chrome
updater
remote attacker
os-level privilege escalation
malicious file
chromium
securityulnerability
high severity
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.8
Confidence
High
Insufficient data validation in Updater in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)
Related
cvelist
cvelist
CVE-2024-3173
2024-07-16 22:14:03
debiancve
debiancve
CVE-2024-3173
2024-07-16 23:15:24
nvd
nvd
CVE-2024-3173
2024-07-16 23:15:24
cve
cve
CVE-2024-3173
2024-07-16 23:15:24
vulnrichment
vulnrichment
CVE-2024-3173
2024-07-16 22:14:03
kaspersky
kaspersky
KLA62281 Multiple vulnerabilities in Google Chrome
2023-12-05 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-5573-1)
2023-12-11 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2023-12-05 00:00:00
redos
redos
ROS-20240724-01
2024-07-24 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.8
Confidence
High
Related for OSV:CVE-2024-3173