CVE-2024-3838

2024-04-1707:46:10

Chrome

github.com

google chrome

autofill

ui spoofing

crafted app

security vulnerability

AI Score

6.1

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed an attacker who convinced a user to install a malicious app to perform UI spoofing via a crafted app. (Chromium security severity: Medium)

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
    ],
    "vendor": "google",
    "product": "chrome",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "124.0.6367.60",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]