CVE-2024-3172

2024-07-1622:14:03

Chrome

github.com

insufficient data validation

google chrome

devtools

remote attacker

arbitrary code

crafted html page

ui gestures

chromium

securityseverity

high

AI Score

7.1

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

Insufficient data validation in DevTools in Google Chrome prior to 121.0.6167.85 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
    ],
    "vendor": "google",
    "product": "chrome",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "121.0.6167.85",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]