CVE-2024-4950

2024-05-1521:15:09

Google

osv.dev

google chrome

ui spoofing

downloads

html page

remote attacker

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.6%

JSON

Inappropriate implementation in Downloads in Google Chrome prior to 125.0.6422.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CPENameOperatorVersion
chromiumeq120.0.6099.71-1~deb12u1
chromiumeq81.0.4044.62-1
chromiumeq122.0.6261.94-1
chromiumeq75.0.3770.90-1
chromiumeq89.0.4389.114-1
chromiumeq114.0.5735.198-1~deb12u1
chromiumeq100.0.4896.75-1
chromiumeq118.0.5993.117-1~deb11u1
chromiumeq120.0.6099.129-1
chromiumeq116.0.5845.96-1

Name	Operator	Version
chromium	eq	120.0.6099.71-1~deb12u1
chromium	eq	81.0.4044.62-1
chromium	eq	122.0.6261.94-1
chromium	eq	75.0.3770.90-1
chromium	eq	89.0.4389.114-1
chromium	eq	114.0.5735.198-1~deb12u1
chromium	eq	100.0.4896.75-1
chromium	eq	118.0.5993.117-1~deb11u1
chromium	eq	120.0.6099.129-1
chromium	eq	116.0.5845.96-1