Use of Function with Inconsistent Implementations in atom-shell
CVE-2024-7001
- atom-shell
- chromium
- chromiumembeddedframework.runtime
- electron
- electron-nightly
- electron-prebuilt
- org.webjars.npm:electron
- org.webjars.npm:electron-prebuilt
Summary
Inappropriate implementation in HTML in Google Chrome versions prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.
- LOW
- NETWORK
- LOW
- UNCHANGED
- REQUIRED
- NONE
- NONE
- NONE
CWE-474 - Use of Function with Inconsistent Implementations
The code uses a function that has inconsistent implementations across operating systems and versions.
References
Advisory Timeline
- Published