Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Northsea

#22689of 53,630
10Total CVSS
Vulnerabilities · 1
PT-2024-5220
10
2023-12-09
Google · Google Chrome · CVE-2024-3173
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 120.0.6099.62 Description: The issue is related to insufficient data validation in the Updater component of Google Chrome, allowing a remote attacker to perform OS-level privilege escalation via a malicious file. This can lead to a remote attacker gaining elevated privileges on the affected system. Recommendations: For versions prior to 120.0.6099.62, update to version 120.0.6099.62 or later to resolve the issue. As a temporary workaround, consider restricting access to the Updater component until a patch is applied.