CVE-2024-11919: Inappropriate implementation in Intents
Inappropriate implementation in Intents in Google Chrome on Android prior to 129.0.6668.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 129.0.6668.58
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-11919?
The severity of CVE-2024-11919 is classified as Low by Chromium security standards.
How do I fix CVE-2024-11919?
To fix CVE-2024-11919, you should update Google Chrome on Android to version 129.0.6668.58 or later.
What can an attacker do with CVE-2024-11919?
An attacker can perform UI spoofing on affected devices via a crafted HTML page.
What versions of Google Chrome are affected by CVE-2024-11919?
Google Chrome versions prior to 129.0.6668.58 on Android are affected by CVE-2024-11919.
Is CVE-2024-11919 present in desktop versions of Google Chrome?
CVE-2024-11919 specifically affects Google Chrome on Android and does not apply to desktop versions.