{ "id": "CVE-2024-3844", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2024-04-17T08:15:10.620", "lastModified": "2024-04-23T02:15:48.997", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "Inappropriate implementation in Extensions in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Low)" }, { "lang": "es", "value": "La implementaci\u00f3n inapropiada en Extensiones en Google Chrome anteriores a 124.0.6367.60 permiti\u00f3 a un atacante remoto realizar una suplantaci\u00f3n de interfaz de usuario a trav\u00e9s de una extensi\u00f3n de Chrome manipulada. (Severidad de seguridad de Chrome: baja)" } ], "metrics": {}, "references": [ { "url": "https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_16.html", "source": "chrome-cve-admin@google.com" }, { "url": "https://issues.chromium.org/issues/40058873", "source": "chrome-cve-admin@google.com" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CWIVXXSVO5VB3NAZVFJ7CWVBN6W2735T/", "source": "chrome-cve-admin@google.com" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PCWPUBGTBNT4EW32YNZMRIPB3Y4R6XL6/", "source": "chrome-cve-admin@google.com" } ] }