Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-64445
HistoryAug 17, 2023 - 12:00 a.m.

Google Chrome Input Validation Error Vulnerability (CNVD-2023-64445)

2023-08-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
google chrome
input validation
vulnerability
devtools
remote attacker
malicious request
shell commands
root privileges.

0.001 Low

EPSS

Percentile

40.5%

Google Chrome is a web browser from Google, an American company. An input validation error vulnerability exists in versions of Google Chrome prior to 106.0.5249.62, which stems from insufficient DevTools data validation. A remote attacker can exploit this vulnerability by sending a malicious HTTP or HTTPS request to execute arbitrary shell commands with root user privileges.

CPENameOperatorVersion
google chrome <106.eq0.5249.62