CVE-2024-0814

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. (Chromium security severity: Medium)

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-346

Affected software

No affected versions have been published.

Timeline

Published: Jan 24, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-08158.8Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0 CVE-2024-08165.5The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50(ABVY.4)C0 could allow an authenticated local attacker to cause den CVE-2024-08177.8Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0 CVE-2024-08189.1Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6 CVE-2024-08197.8Improper initialization of default settings in TeamViewer Remote Client prior version 15.51.5 for Windows, Linux and macOS, allow a low priv CVE-2024-08205.4The Jobs for WordPress plugin before 2.7.4 does not sanitise and escape some parameters, which could allow users with a role as low as contr CVE-2024-08216.1The Cost of Goods Sold (COGS): Cost & Profit Calculator for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting CVE-2024-08227.5An authentication bypass vulnerability was found in overt-engine. This flaw allows the creation of users in the system without authenticatio CVE-2024-08235.4The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Link To' url in carousels in a CVE-2024-08245.4The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Link Anything functionality in CVE-2024-08258.8The Vimeography: Vimeo Video Gallery WordPress Plugin plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and CVE-2024-08265.4The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to