CVE-2024-3838

Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed an attacker who convinced a user to install a malicious app to perform UI spoofing via a crafted app. (Chromium security severity: Medium)
Configurations

Configuration 1 (hide)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

History

06 Aug 2024, 19:35

Type Values Removed Values Added
CWE CWE-358

23 Apr 2024, 18:15

Type Values Removed Values Added
References
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WEP5NJUWMDRLDQUKU4LFDUHF5PCYAPIO/ -

23 Apr 2024, 02:15

Type Values Removed Values Added
References
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PCWPUBGTBNT4EW32YNZMRIPB3Y4R6XL6/ -

21 Apr 2024, 04:15

Type Values Removed Values Added
References
  • () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CWIVXXSVO5VB3NAZVFJ7CWVBN6W2735T/ -

19 Apr 2024, 17:18

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
CPE cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
References () https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_16.html - () https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_16.html - Vendor Advisory
References () https://issues.chromium.org/issues/328278717 - () https://issues.chromium.org/issues/328278717 - Permissions Required
First Time Google
Google chrome

17 Apr 2024, 12:48

Type Values Removed Values Added
Summary
  • (es) La implementación inadecuada de Autocompletar en Google Chrome anterior a 124.0.6367.60 permitió que un atacante convenciera a un usuario de instalar una aplicación maliciosa para realizar una suplantación de la interfaz de usuario a través de una aplicación manipulada. (Severidad de seguridad de Chromium: media)

17 Apr 2024, 08:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-17 08:15

Updated : 2024-08-06 19:35


NVD link : CVE-2024-3838

Mitre link : CVE-2024-3838

CVE.ORG link : CVE-2024-3838


JSON object : View

Products Affected

google

  • chrome
CWE
NVD-CWE-noinfo CWE-358

Improperly Implemented Security Check for Standard