Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-3841

Опубликовано: 17 апр. 2024
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 6.1

Описание

Insufficient data validation in Browser Switcher in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to inject scripts or HTML into a privileged page via a malicious file. (Chromium security severity: Medium)

РелизСтатусПримечание
devel

not-affected

code not present
esm-apps/noble

not-affected

code not present
esm-infra/focal

DNE

focal was not-affected [code not present]
focal

not-affected

code not present
jammy

not-affected

code not present
mantic

not-affected

code not present
noble

not-affected

code not present
upstream

released

Показывать по

EPSS

Процентиль: 37%
0.0015
Низкий

6.1 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.1
nvd
около 1 года назад

Insufficient data validation in Browser Switcher in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to inject scripts or HTML into a privileged page via a malicious file. (Chromium security severity: Medium)

msrc
около 1 года назад

Chromium: CVE-2024-3841 Insufficient data validation in Browser Switcher

CVSS3: 6.1
debian
около 1 года назад

Insufficient data validation in Browser Switcher in Google Chrome prio ...

CVSS3: 7.6
github
около 1 года назад

Insufficient data validation in Browser Switcher in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to inject scripts or HTML into a privileged page via a malicious file. (Chromium security severity: Medium)

CVSS3: 5.4
fstec
около 1 года назад

Уязвимость расширения Browser Switcher браузеров Microsoft Edge и Google Chrome, позволяющая нарушителю получить доступ к конфиденциальной информации

EPSS

Процентиль: 37%
0.0015
Низкий

6.1 Medium

CVSS3