Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2024-8907
HistorySep 17, 2024 - 9:15 p.m.

CVE-2024-8907

2024-09-1721:15:13
Debian Security Bug Tracker
security-tracker.debian.org
insufficient data validation
omnibox
google chrome
android
xss
crafted ui gestures

AI Score

6.3

Confidence

High

EPSS

0

Percentile

9.6%

Insufficient data validation in Omnibox in Google Chrome on Android prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML (XSS) via a crafted set of UI gestures. (Chromium security severity: Medium)

AI Score

6.3

Confidence

High

EPSS

0

Percentile

9.6%