CVE-2024-7019

2024-09-2321:56:29

Chrome

github.com

google chrome

ui implementation

remote attacker

ui spoofing

crafted html page

chromium security

AI Score

6.1

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Inappropriate implementation in UI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
    ],
    "vendor": "google",
    "product": "chrome",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "124.0.6367.60",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]