Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Chrome | affected |
|
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 Debian DSA |
DSA-5773-1 | chromium security update |
Mon, 14 Jul 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
Mon, 23 Sep 2024 18:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Google
Google chrome |
|
| Weaknesses | NVD-CWE-noinfo | |
| CPEs | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Google
Google chrome |
|
| Metrics |
cvssV3_1
|
Wed, 18 Sep 2024 16:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 17 Sep 2024 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Incorrect security UI in Downloads in Google Chrome prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: Chrome
Published:
Updated: 2025-03-25T16:10:43.942Z
Reserved: 2024-09-16T20:06:01.324Z
Link: CVE-2024-8906
Vulnrichment
Updated: 2024-09-18T15:33:08.499Z
NVD
Status : Modified
Published: 2024-09-17T21:15:13.140
Modified: 2025-03-25T17:16:14.237
Link: CVE-2024-8906
Redhat
No data.
OpenCVE Enrichment
No data.