NetSight
IP …
medium6.1

CVE-2024-3841

Insufficient data validation in Browser Switcher in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to inject scripts or HTML into a privileged …

Impact

Insufficient data validation in Browser Switcher in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to inject scripts or HTML into a privileged page via a malicious file. (Chromium security severity: Medium)

Affected products

VendorProductAffected versions
GoogleChrome
before 124.0.6367.60
FedoraprojectFedora
Versions 38, 39, 40

Weakness classification

CWE-79CWE-20

References