Google · Google Chrome · CVE-2024-3838
**Name of the Vulnerable Software and Affected Versions**
Google Chrome versions prior to 124.0.6367.60
Microsoft Edge (affected versions not specified)
**Description**
The issue is related to an inappropriate implementation in the Autofill feature, allowing an attacker to perform UI spoofing via a crafted app if they convince a user to install a malicious app. This could potentially lead to unauthorized access to confidential information or cause a denial of service.
**Recommendations**
For Google Chrome versions prior to 124.0.6367.60, update to version 124.0.6367.60 or later to resolve the issue.
For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.