2024-01-10 23:00:28 +00:00
{
"id" : "CVE-2024-0333" ,
"sourceIdentifier" : "chrome-cve-admin@google.com" ,
"published" : "2024-01-10T22:15:50.907" ,
2024-01-11 05:00:28 +00:00
"lastModified" : "2024-01-11T03:15:10.893" ,
2024-01-10 23:00:28 +00:00
"vulnStatus" : "Received" ,
"descriptions" : [
{
"lang" : "en" ,
"value" : "Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to install a malicious extension via a crafted HTML page. (Chromium security severity: High)"
}
] ,
"metrics" : { } ,
"references" : [
{
"url" : "https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_9.html" ,
"source" : "chrome-cve-admin@google.com"
} ,
{
"url" : "https://crbug.com/1513379" ,
"source" : "chrome-cve-admin@google.com"
2024-01-11 05:00:28 +00:00
} ,
{
"url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPYCYENYQYADCOS6XG4JITUVRZ6HTE2B/" ,
"source" : "chrome-cve-admin@google.com"
2024-01-10 23:00:28 +00:00
}
]
}