CVE-2024-8907

Published: 2024-09-17T21:15Z

Last Modified: 2025-03-25T17:16Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Insufficient data validation in Omnibox in Google Chrome on Android prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML (XSS) via a crafted set of UI gestures. (Chromium security severity: Medium) > MITRE Terms of Use apply – see LICENSE‑MITRE.txt