CVE-2024-3911

6.5 mediumEPSS 0.5%

Medium (6.5). EPSS 0.5% chance of exploitation in the next 30 days.

An unauthenticated remote attacker can deceive users into performing unintended actions due to improper restriction of rendered UI layers or frames.

Severity

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-1021
Published: 2024-04-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19