Security Advisory

CVE-2024-9963

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-10-15 20:14:56
Last updated 2025-03-25 16:30:44
Assigner Chrome
State PUBLISHED

Description

Insufficient data validation in Downloads in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)