CVE-2024-0805: Inappropriate implementation in Downloads
Chromium: CVE-2024-0805 Inappropriate implementation in Downloads
Other sources
Inappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security severity: Medium)
— MITRE
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
— Microsoft
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-0805?
The severity of CVE-2024-0805 is critical as it allows for inappropriate implementation affecting the security of the affected software.
How do I fix CVE-2024-0805?
To fix CVE-2024-0805, users should update Google Chrome to version 121.0.6167.85 or Microsoft Edge to the latest available version.
Which systems are affected by CVE-2024-0805?
CVE-2024-0805 affects Google Chrome versions up to 121.0.6167.85 and Microsoft Edge (Chromium-based) prior to the latest security updates.
Is there any workaround for CVE-2024-0805?
Currently, there are no documented workarounds for CVE-2024-0805, making update the only recommended solution.
Who is responsible for addressing CVE-2024-0805?
Google assigned CVE-2024-0805 and is responsible for providing fixes through updates for Chrome, while Microsoft addresses it through updates for Edge.