Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-8906

Опубликовано: 17 сент. 2024
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 4.3

Описание

Incorrect security UI in Downloads in Google Chrome prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

РелизСтатусПримечание
devel

not-affected

code not present
esm-apps/noble

not-affected

code not present
esm-infra/focal

DNE

focal was not-affected [code not present]
focal

not-affected

code not present
jammy

not-affected

code not present
noble

not-affected

code not present
upstream

released

Показывать по

EPSS

Процентиль: 34%
0.0013
Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
nvd
9 месяцев назад

Incorrect security UI in Downloads in Google Chrome prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVSS3: 4.3
debian
9 месяцев назад

Incorrect security UI in Downloads in Google Chrome prior to 129.0.666 ...

CVSS3: 4.3
github
9 месяцев назад

Incorrect security UI in Downloads in Google Chrome prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVSS3: 4.3
fstec
12 месяцев назад

Уязвимость компонента Downloads (Загрузки) браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю осуществить подмену пользовательского интерфейса

msrc
9 месяцев назад

Chromium: CVE-2024-8906 Incorrect security UI in Downloads

EPSS

Процентиль: 34%
0.0013
Низкий

4.3 Medium

CVSS3