VULNERABILITY INTELLIGENCE

CVE-2024-9963

CVSS score4.3 MEDIUM

EPSS probability0.32%

CISA KEVNot currently listed

Published2024-10-15

Last modified2026-06-17

Description

Insufficient data validation in Downloads in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)