CVE-2024-9963

Publication date

2024-10-15 20:14:56

Family

Chrome

State

PUBLISHED

Description

Insufficient data validation in Downloads in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)