CVE-2024-0805: Inappropriate implementation in Downloads

Reference Links

• https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html (Advisory)
• https://crbug.com/1514925
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0805 (Advisory)
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKC/

Parent vulnerabilities

(Appears in the following advisories)

• 2666430141006798223

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2024-3170
• CVE-2024-0807
• CVE-2024-0812
• CVE-2024-0808
• CVE-2024-3172
• CVE-2024-0810
• CVE-2024-0814
• CVE-2024-0813
• CVE-2024-0806
• CVE-2024-0804
• CVE-2024-0811
• CVE-2024-0809

Frequently Asked Questions

• What is the severity of CVE-2024-0805?

  The severity of CVE-2024-0805 is critical as it allows for inappropriate implementation affecting the security of the affected software.

• How do I fix CVE-2024-0805?

  To fix CVE-2024-0805, users should update Google Chrome to version 121.0.6167.85 or Microsoft Edge to the latest available version.

• Which systems are affected by CVE-2024-0805?

  CVE-2024-0805 affects Google Chrome versions up to 121.0.6167.85 and Microsoft Edge (Chromium-based) prior to the latest security updates.

• Is there any workaround for CVE-2024-0805?

  Currently, there are no documented workarounds for CVE-2024-0805, making update the only recommended solution.

• Who is responsible for addressing CVE-2024-0805?

  Google assigned CVE-2024-0805 and is responsible for providing fixes through updates for Chrome, while Microsoft addresses it through updates for Edge.