CVE-2024-0333: Insufficient data validation in Extensions
Chromium: CVE-2024-0333 Insufficient data validation in Extensions
Other sources
Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to install a malicious extension via a crafted HTML page. (Chromium security severity: High)
— MITRE
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
— Microsoft
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0333?
CVE-2024-0333 has been classified with a moderate severity level due to its insufficient data validation.
How do I fix CVE-2024-0333?
To address CVE-2024-0333, update Google Chrome to version 120.0.6099.216 or later.
Which applications are affected by CVE-2024-0333?
CVE-2024-0333 affects Microsoft Edge (Chromium-based) and Google Chrome versions prior to 120.0.6099.216.
Is CVE-2024-0333 exploitable remotely?
Yes, CVE-2024-0333 could potentially be exploited remotely, leading to security risks if left unaddressed.
When was CVE-2024-0333 discovered?
CVE-2024-0333 was disclosed in January 2024, following updates in the Chromium code base.