CVE-2024-0812: Inappropriate implementation in Accessibility

Reference Links

• https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html (Advisory)
• https://crbug.com/1484394
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0812 (Advisory)
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MMI6GXFONZV6HE3BPZO3AP6GUVQLG4JQ/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXDSGAFQD4BDB4IB2O4ZUSHC3JCVQEKC/

Parent vulnerabilities

(Appears in the following advisories)

• 2666430141006798223

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2024-3170
• CVE-2024-0807
• CVE-2024-0808
• CVE-2024-3172
• CVE-2024-0810
• CVE-2024-0814
• CVE-2024-0813
• CVE-2024-0806
• CVE-2024-0805
• CVE-2024-0804
• CVE-2024-0811
• CVE-2024-0809

Frequently Asked Questions

• What is the severity of CVE-2024-0812?

  The severity of CVE-2024-0812 is classified as high due to its potential impact on user security.

• How do I fix CVE-2024-0812?

  To fix CVE-2024-0812, update your Google Chrome to version 121.0.6167.85 or later and Microsoft Edge to version 121.0.2277.83 or later.

• Which software versions are affected by CVE-2024-0812?

  CVE-2024-0812 affects Google Chrome versions prior to 121.0.6167.85, Microsoft Edge versions prior to 121.0.2277.83, and certain versions of Fedoraproject Fedora.

• Is CVE-2024-0812 specific to certain operating systems?

  Yes, CVE-2024-0812 affects browser software that runs on multiple operating systems, including Windows and Linux distributions like Fedora.

• Who is responsible for addressing the CVE-2024-0812 vulnerability?

  Google is responsible for addressing CVE-2024-0812 through updates to Chrome, while Microsoft addresses it in Microsoft Edge and Chromium-based products.