CVE-2024-0805

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Inappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security severity: Medium)

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-451

Affected software

VendorProductVersions
GoogleChrome>= 121.0.6167.85, < 121.0.6167.85

References

Timeline

Published
Jan 24, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-08068.8Use after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via speCVE-2024-08078.8Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a cCVE-2024-08089.8Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a maCVE-2024-08094.3Inappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to bypass Autofill restrictions vCVE-2024-08104.3Insufficient policy enforcement in DevTools in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a maCVE-2024-08114.3Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install aCVE-2024-08128.8Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit objecCVE-2024-08138.8Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extenCVE-2024-08146.5Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof security UI via a cCVE-2024-08158.8Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0CVE-2024-08165.5The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause denCVE-2024-08177.8Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0
CVE-2024-0805: Medium severity, CVSS 4.3 | Vulnix