CVE-2024-13983

Medium · 6.3

CVSS

6.3

EPSS

0.1%

Published

Nov 14, 2025

CISA due date

—

The record

Inappropriate implementation in Lens in Google Chrome on iOS prior to 136.0.7103.59 allowed a remote attacker to perform UI spoofing via a crafted QR code. (Chromium security severity: Low)

Affected packages

Ecosystem	Package	Introduced	Fixed