VDB

CISA-2024-2628

CISA-2024-2628 PUBLISHED CVSS 4.3 MEDIUM

Reported by Chrome · Published March 20, 2024

Inappropriate implementation in Downloads in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted URL. (Chromium security severity: Medium)

Risk Scores

CVSS 3.1
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Affected Products

VendorProductVersions
GoogleChrome123.0.6312.58
GoogleChrome123.0.6312.58, 123.0.6312.58
googlechrome0, 0

Timeline

  • Mar 20, 2024 CVE Published
  • Feb 13, 2025 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›