CVE-2024-0811: Inappropriate implementation in Extensions API

Reference Links

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0811 (Advisory)
• https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html (Advisory)
• https://crbug.com/1494490
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKC/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
• http://packetstormsecurity.com/files/177172/Chrome-chrome.pageCapture.saveAsMHTML-Extension-API-Blocked-Origin-Bypass.html

Parent vulnerabilities

(Appears in the following advisories)

• 2666430141006798223

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2024-3170
• CVE-2024-0807
• CVE-2024-0812
• CVE-2024-0808
• CVE-2024-3172
• CVE-2024-0810
• CVE-2024-0814
• CVE-2024-0813
• CVE-2024-0806
• CVE-2024-0805
• CVE-2024-0804
• CVE-2024-0809

Frequently Asked Questions

• What is the severity of CVE-2024-0811?

  CVE-2024-0811 has been assessed as a high-severity vulnerability due to its potential impact on user security.

• How do I fix CVE-2024-0811?

  To resolve CVE-2024-0811, ensure that you update Microsoft Edge and Google Chrome to their latest versions.

• Which products are affected by CVE-2024-0811?

  CVE-2024-0811 affects Microsoft Edge (up to version 121.0.2277.83) and Google Chrome (up to version 121.0.6167.85), as well as specific versions of Fedora.

• Is CVE-2024-0811 being actively exploited?

  As of now, there is no public information confirming active exploitation of CVE-2024-0811, but users should still apply the necessary updates.

• Where can I find more information on CVE-2024-0811?

  Additional details regarding CVE-2024-0811 can be found in the security bulletins from Microsoft and Chrome release notes.