CVE-2024-0805

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Jan 24, 2024
Updated: Jan 29, 2024

Summary

CVE-2024-0805 is a vulnerability found in Google Chrome prior to version 121.0.6167.85 that allows a remote attacker to perform domain spoofing through a crafted domain name. This vulnerability affects various products, including b_v-e7, nzAPMN, QtrC2s, and jTVItU, among others. To remediate this vulnerability, users should update their Google Chrome browser to version 121.0.6167.85 or later. The potential danger posed by this vulnerability is rated as medium severity by Chromium security and has a base score of 4.3 out of 10 according to NIST's CVSS scoring system. The exploitability score is 2.8 out of 10, and it requires user interaction for exploitation while not requiring any privileges. The attack vector is through the network, and the impact on integrity is low while there is no impact on confidentiality or availability.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-0805 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options