CVE-2014-3159

2014-07-2010:00:00

Chrome

www.cve.org

AI Score

6.3

Confidence

Low

EPSS

0.002

Percentile

59.5%

JSON

The WebContentsDelegateAndroid::OpenURLFromTab function in components/web_contents_delegate_android/web_contents_delegate_android.cc in Google Chrome before 36.0.1985.122 on Android does not properly restrict URL loading, which allows remote attackers to spoof the URL in the Omnibox via unspecified vectors.