Lucene search

K
nvd[email protected]NVD:CVE-2024-4950
HistoryMay 15, 2024 - 9:15 p.m.

CVE-2024-4950

2024-05-1521:15:09
web.nvd.nist.gov
cve-2024-4950
inappropriate implementation
downloads
google chrome
ui spoofing
remote attacker
ui gestures
crafted html page
chromium
low severity

8.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.6%

Inappropriate implementation in Downloads in Google Chrome prior to 125.0.6422.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)