CVE-2024-2629
Advisory lineage Upstream: 0 Downstream: 2
Downstream
Modified
Published: 20 Mar 2024, 17:06
Last modified:13 Mar 2025, 18:25
Vulnerability Summary
Overall Risk (default)
low
17/100 CVSS Score
4.3 MEDIUM
v3.1 (cve.org)
EPSS Score
0.21% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
20 Mar 2024, 17:06
Published
Vulnerability first disclosed
13 Mar 2025, 18:25
Last Modified
Vulnerability information updated
Description
Incorrect security UI in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVSS Metrics
- v3.1•MEDIUM•Score: 4.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS Trends
Current EPSS score: 0.21%• Percentile: 43%
Affected Systems
- fedoraproject•fedora
38 | 39 | 40
- Unknown•Chrome
≥ 123.0.6312.58, < 123.0.6312.58 | < 123.0.6312.58
References (5)
- https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_19.html
- https://issues.chromium.org/issues/41487721
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D3Z6CRRN4J3IUZPJZVURGMRBN6WFPTU/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AQVVW4FLQDIJ2UABGXK2SMS5AUGT54FM/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6JINDYFB3MPH43ECTI72BV63K4RXSG22/