Incorrect security UI in Downloads in Google Chrome prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Safaridownloads | apple-osx-upgrade-latest | Jan 22, 2026 | Jan 22, 2026 | |
| Apple Safari | apple-safari-upgrade-26_2apple-safari-windows-uninstall | Dec 15, 2025 | Dec 15, 2025 | |
| Debian | debian-upgrade-chromium | Sep 23, 2024 | Sep 17, 2024 | |
| Google Chrome | google-chrome-upgrade-latest | Sep 18, 2024 | Sep 18, 2024 | |
| Microsoft Edge | microsoft-edge-upgrade-latest | Sep 20, 2024 | Sep 19, 2024 | |
| Suse | — | suse-upgrade-chromedriversuse-upgrade-chromium | Dec 31, 2024 | Sep 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub