Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Oleg

#34337of 53,624
7.6Total CVSS
Vulnerabilities · 1
PT-2024-3077
7.6
2024-04-16
Google · Google Chrome · CVE-2024-3841
**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 124.0.6367.60 **Description** The issue is related to insufficient data validation in the Browser Switcher component, which can be exploited by a remote attacker to inject scripts or HTML into a privileged page via a malicious file. This can potentially allow the attacker to access confidential information. **Recommendations** For versions prior to 124.0.6367.60, update to version 124.0.6367.60 or later to resolve the issue. As a temporary workaround, consider disabling the Browser Switcher component until a patch is available. Restrict access to privileged pages to minimize the risk of exploitation. Avoid using the Browser Switcher with untrusted files until the issue is resolved.