medium4.3

CVE-2024-7020

Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page.

Impact

Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

Affected products

Vendor	Product	Affected versions
Google	Chrome	before 124.0.6367.60

Weakness classification

CWE-451

References

NVD record
CVE.org record
https://issues.chromium.org/issues/40076065