Google · Google Chrome · CVE-2024-6996
**Name of the Vulnerable Software and Affected Versions**
Google Chrome versions prior to 127.0.6533.72
Microsoft Edge (affected versions not specified)
**Description**
The issue is related to a race condition in the Frames component of Google Chrome and Microsoft Edge browsers, which can be exploited by a remote attacker to perform UI spoofing via a crafted HTML page. This can be achieved when a user is convinced to engage in specific UI gestures. The estimated number of potentially affected devices worldwide is not provided.
**Recommendations**
For Google Chrome versions prior to 127.0.6533.72, update to version 127.0.6533.72 or later to resolve the issue.
For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.