← Database

CVE-2024-4950

MEDIUM CVSS: 6.5 Published: 2024-05-15 Modified: 2026-06-17

Description

Inappropriate implementation in Downloads in Google Chrome prior to 125.0.6422.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

Affected Platforms

Fedoraproject FedoraGoogle Chrome

Weakness Type

CWE-1021, CWE-451

References