Security Advisory

CVE-2024-8907

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-09-17 21:07:19

Last updated 2025-03-25 16:10:44

Assigner Chrome

State PUBLISHED

Description

Insufficient data validation in Omnibox in Google Chrome on Android prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML (XSS) via a crafted set of UI gestures. (Chromium security severity: Medium)

← Browse all CVEs View on cve.org ↗