CVE-2024-3172: Insufficient data validation in DevTools
Insufficient data validation in DevTools in Google Chrome prior to 121.0.6167.85 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-3172?
CVE-2024-3172 has a high severity rating due to its potential for remote code execution.
How do I fix CVE-2024-3172?
To fix CVE-2024-3172, update Google Chrome to version 121.0.6167.85 or later.
What can an attacker do with CVE-2024-3172?
An attacker can execute arbitrary code on a user's system by convincing them to engage in specific user interface gestures.
Which versions of Google Chrome are affected by CVE-2024-3172?
CVE-2024-3172 affects all versions of Google Chrome prior to 121.0.6167.85.
What is insufficient data validation in the context of CVE-2024-3172?
Insufficient data validation in CVE-2024-3172 refers to the vulnerability that allows crafted HTML pages to bypass security checks and execute untrusted code.