CVE-2024-3844

MEDIUM 4.3EPSS 0.7%

Inappropriate implementation in Extensions in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Low)

CVSS v3.1: 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v3.1: 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS: 0.72% chance of exploitation in the next 30 days, 52th percentile
Published: 2024-04-17
Updated: 2025-02-13

Proof-of-concept exploits (1)

https://issues.chromium.org/issues/40058873

References

Related