Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-3843
HistoryApr 17, 2024 - 12:00 a.m.

CVE-2024-3843

2024-04-1700:00:00
ubuntu.com
ubuntu.com
8
google chrome
data validation
ui spoofing
html page
chromium
ubuntu
debian
snap package

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.2%

Insufficient data validation in Downloads in Google Chrome prior to
124.0.6367.60 allowed a remote attacker to perform UI spoofing via a
crafted HTML page. (Chromium security severity: Medium)

Notes

Author Note
alexmurray The Debian chromium source package is called chromium-browser in Ubuntu
mdeslaur starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.2%