Google · Google Chrome · CVE-2024-3173
Name of the Vulnerable Software and Affected Versions:
Google Chrome versions prior to 120.0.6099.62
Description:
The issue is related to insufficient data validation in the Updater component of Google Chrome, allowing a remote attacker to perform OS-level privilege escalation via a malicious file. This can lead to a remote attacker gaining elevated privileges on the affected system.
Recommendations:
For versions prior to 120.0.6099.62, update to version 120.0.6099.62 or later to resolve the issue. As a temporary workaround, consider restricting access to the Updater component until a patch is applied.