Lucene search

K
osvGoogleOSV:CVE-2024-3843
HistoryApr 17, 2024 - 8:15 a.m.

CVE-2024-3843

2024-04-1708:15:10
Google
osv.dev
3
data validation
google chrome
downloads
ui spoofing
html page
security vulnerability

5.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.2%

Insufficient data validation in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)