Rewterz
‘Rockstar 2FA’ Phishing-as-a-Service Uses AITM Attacks to Target Microsoft 365 Users – Active IOCs
December 3, 2024
Rewterz
Multiple Microsoft .NET, .NET Framework and Visual Studio Vulnerabilities
December 3, 2024

Multiple Google Chrome Vulnerabilities

Severity

Medium

Analysis Summary

CVE-2024-11111 CVSS:6.5

Google Chrome could allow a remote attacker to bypass security restrictions, caused by inappropriate implementation in Autofill. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to bypass security restrictions.

CVE-2024-11115 CVSS:6.5

Google Chrome could allow a remote attacker to bypass security restrictions, caused by insufficient policy enforcement in Navigation. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to bypass security restrictions.

CVE-2024-11110 CVSS:6.5

Google Chrome could allow a remote attacker to bypass security restrictions, caused by inappropriate implementation in Blink. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to bypass security restrictions.

CVE-2024-11114 CVSS:6.5

Google Chrome could allow a remote attacker to bypass security restrictions, caused by inappropriate implementation in Views. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to bypass security restrictions.

CVE-2024-11116 CVSS:6.5

Google Chrome could allow a remote attacker to bypass security restrictions, caused by inappropriate implementation in Paint. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to bypass security restrictions.

Impact

  • Security Bypass

Indicators of Compromise

CVE

  • CVE-2024-11111
  • CVE-2024-11115
  • CVE-2024-11110
  • CVE-2024-11114
  • CVE-2024-11116

Affected Vendors

Google

Affected Products

  • Google Chrome - 131.0

Remediation

Upgrade to the latest version of Google Chrome, available from the Google Chrome Releases Website.

Google Chrome Releases Website