Inappropriate implementation in FedCM in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
References
Link | Resource |
---|---|
https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html | Release Notes Vendor Advisory |
https://issues.chromium.org/issues/339654392 | Permissions Required |
Configurations
History
30 Oct 2024, 16:35
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-79 |
22 Aug 2024, 17:39
Type | Values Removed | Values Added |
---|---|---|
First Time |
Google
Google chrome |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
CPE | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | |
References | () https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html - Release Notes, Vendor Advisory | |
References | () https://issues.chromium.org/issues/339654392 - Permissions Required | |
CWE | NVD-CWE-noinfo |
22 Aug 2024, 12:48
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
21 Aug 2024, 21:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-08-21 21:15
Updated : 2024-10-30 16:35
NVD link : CVE-2024-7976
Mitre link : CVE-2024-7976
CVE.ORG link : CVE-2024-7976
JSON object : View
Products Affected
- chrome
CWE
NVD-CWE-noinfo
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')