CVE-2024-4950

Inappropriate implementation in Downloads in Google Chrome prior to 125.0.6422.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CVSS v3.1

5.3 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS

0.92% chance of exploitation in the next 30 days, 58th percentile

Published

2024-05-15

Updated

2025-03-28

Proof-of-concept exploits (1)

• https://issues.chromium.org/issues/40065403

References

• CVE Record
• NVD entry

Related

• CVE-2024-4947
• CVE-2024-4956
• CVE-2024-4946
• CVE-2024-4957
• CVE-2024-4945
• CVE-2024-49576