CVE-2024-3838

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-3838

Severity

5.5

Medium

CVSS V3

Description

Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed an attacker who convinced a user to install a malicious app to perform UI spoofing via a crafted app. (Chromium security severity: Medium)

References

https://images.chainguard.dev/security/CGA-563m-w32j-w882
https://github.com/advisories/GHSA-fff2-pwcg-x73m
https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_16.html
https://issues.chromium.org/issues/328278717
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CWIVXXSVO5VB3NAZVFJ7CWVBN6W2735T/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PCWPUBGTBNT4EW32YNZMRIPB3Y4R6XL6/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WEP5NJUWMDRLDQUKU4LFDUHF5PCYAPIO/
https://security-tracker.debian.org/tracker/CVE-2024-3838

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

CVE-2024-3838

Severity

Description

References

Affected packages

The trusted source for open source

Product

Solutions

Customers

Resources

Company