CVE-2024-7976

Inappropriate implementation in FedCM in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
Configurations

Configuration 1 (hide)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

History

30 Oct 2024, 16:35

Type Values Removed Values Added
CWE CWE-79

22 Aug 2024, 17:39

Type Values Removed Values Added
First Time Google
Google chrome
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 4.3
CPE cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
References () https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html - () https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html - Release Notes, Vendor Advisory
References () https://issues.chromium.org/issues/339654392 - () https://issues.chromium.org/issues/339654392 - Permissions Required
CWE NVD-CWE-noinfo

22 Aug 2024, 12:48

Type Values Removed Values Added
Summary
  • (es) La implementación inapropiada en FedCM en Google Chrome anterior a 128.0.6613.84 permitió a un atacante remoto realizar una suplantación de interfaz de usuario a través de una página HTML manipulada. (Severidad de seguridad de Chromium: media)

21 Aug 2024, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-08-21 21:15

Updated : 2024-10-30 16:35


NVD link : CVE-2024-7976

Mitre link : CVE-2024-7976

CVE.ORG link : CVE-2024-7976


JSON object : View

Products Affected

google

  • chrome
CWE
NVD-CWE-noinfo CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')