CVE-2024-0814
CVE-2024-0814 affects Google Chrome, allowing attackers to spoof the security UI. This vulnerability stems from incorrect security UI handling in the Payments feature within Google Chrome versions prior to 121.0.6167.85. A remote attacker could exploit this weakness by crafting a malicious HTML page, potentially deceiving users. The risk associated is that attackers can trick users into unknowingly providing sensitive payment information. Although the CVSS score is 6.5, indicating medium severity, the SOCRadar Vulnerability Risk Score (SVRS) is 30, suggesting a lower immediate threat level compared to critical vulnerabilities. This means while the issue needs addressing, it's not as urgent as vulnerabilities with an SVRS above 80. However, organizations should still patch to prevent potential exploitation and maintain user trust.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.