Beveiligingsadvies

CVE-2024-9963

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-10-15 20:14:56
Laatst bijgewerkt 2025-03-25 16:30:44
Toegewezen door Chrome
CVSS-score 4.3
Status PUBLISHED

Beschrijving

Insufficient data validation in Downloads in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)