CVE-2024-7020

2024-09-2321:56:30

Chrome

github.com

google chrome

autofill

cve-2024-7020

ui spoofing

html page

security vulnerability

AI Score

6.1

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
    ],
    "vendor": "google",
    "product": "chrome",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "124.0.6367.60",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]