Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-3846
HistoryApr 17, 2024 - 12:00 a.m.

CVE-2024-3846

2024-04-1700:00:00
ubuntu.com
ubuntu.com
7
google chrome
ui spoofing
remote attacker
html page
debian
ubuntu

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.1%

Inappropriate implementation in Prompts in Google Chrome prior to
124.0.6367.60 allowed a remote attacker who convinced a user to engage in
specific UI gestures to perform UI spoofing via a crafted HTML page.
(Chromium security severity: Low)

Notes

Author Note
alexmurray The Debian chromium source package is called chromium-browser in Ubuntu
mdeslaur starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.1%