CVE-2024-3844: Inappropriate implementation in Extensions
Chromium: CVE-2024-3844 Inappropriate implementation in Extensions
Other sources
Inappropriate implementation in Extensions in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Low)
— MITRE
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
— Microsoft
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What vulnerabilities does CVE-2024-3844 address?
CVE-2024-3844 addresses an inappropriate implementation found in Chromium affecting browsers like Microsoft Edge and Google Chrome.
What is the severity of CVE-2024-3844?
The severity of CVE-2024-3844 is not explicitly stated, but it is addressed in stable updates for affected browsers.
How do I fix CVE-2024-3844?
To fix CVE-2024-3844, update Microsoft Edge (Chromium-based) or Google Chrome to the latest version above 124.0.6367.60.
Which software versions are affected by CVE-2024-3844?
CVE-2024-3844 affects versions of Google Chrome up to 124.0.6367.60 and specific releases of Fedora 38, 39, and 40.
Is there a direct recommendation for CVE-2024-3844?
Yes, the recommendation is to upgrade your browser to the latest version immediately to mitigate CVE-2024-3844.