Unpatched Flaw in Xiaomi's Built-in Browser App Lets Hackers Spoof URLs

EXCLUSIVE — Beware, if you are using a Xiaomi's Mi or Redmi smartphone, you should immediately update its built-in MI browser or the Mint browser available on Google Play Store for non-Xiaomi Android devices. That's because both web browser apps created by Xiaomi are vulnerable to a critical...

The vulnerability of the Omnibox component in the Google Chrome web browser, which allows a hacker to manipulate the content of the address bar

The vulnerability of the Omnibox component in the Google Chrome web browser is related to errors in processing special characters. Exploiting this vulnerability could allow a malicious actor to manipulate the content of the address bar remotely...

The vulnerability of the Omnibox component in the Google Chrome web browser, which allows a hacker to manipulate the content of the address bar

The vulnerability of the Omnibox component in the Google Chrome web browser is related to errors in processing special characters. Exploiting this vulnerability could allow a malicious actor to manipulate the content of the address bar remotely...

The vulnerability of the URLFormatter component in the Google Chrome web browser allows a hacker to manipulate the content of the URL bar.

The vulnerability of the URLFormatter component in the Google Chrome web browser is related to errors in processing special characters. Exploiting this vulnerability could allow a malicious actor to manipulate the content of the address bar remotely...

The vulnerability of the Omnibox component in the Google Chrome web browser, which allows a hacker to manipulate the content of the address bar

The vulnerability of the Omnibox component in the Google Chrome web browser is related to errors in processing special characters. Exploiting this vulnerability could allow a malicious actor to manipulate the content of the address bar remotely...

The vulnerability of the URLFormatter component in the Google Chrome web browser allows a hacker to manipulate the content of the URL bar.

The vulnerability of the URLFormatter component in the Google Chrome web browser is related to errors in processing special characters. Exploiting this vulnerability could allow a malicious actor to manipulate the content of the address bar remotely...

The vulnerability of the Omnibox component in the Google Chrome web browser, which allows a hacker to manipulate the content of the address bar

The vulnerability of the Omnibox component in the Google Chrome web browser is related to errors in processing special characters. Exploiting this vulnerability could allow a malicious actor to manipulate the content of the address bar remotely...

DEBIAN-CVE-2019-5776

Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

UBUNTU-CVE-2019-5781

Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

chromium-browser: Insufficient policy enforcement in Omnibox

Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

VulnCheck KEV: CVE-2019-11695

A custom cursor defined by scripting on a site can position itself over the addressbar to spoof the actual cursor when it should not be allowed outside of the primary web content area. This could be used by a malicious site to trick users into clicking on permission prompts, doorhanger...

Google Chrome Domain Spoofing Vulnerability

Google Chrome is a web browser developed by Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in Omnibox in versions of Google Chrome prior to 72.0.3626.81, which stems from the program failing to adequately enforce policies. Allows remote attackers to spoof t...

About the security content of iCloud for Windows 7.9 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Code injection

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge...

CVE-2019-6251

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge...

CVE-2019-6251

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge...

DEBIAN-CVE-2019-6251

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge...

CVE-2019-6251

CVE-2019-6251 affects WebKitGTK and WPE WebKit prior to 2.24.1. The issue is address bar spoofing via certain JavaScript redirections that could cause malicious content to appear as if it were from a trusted URI. Publicly documented references in Debian/Ubuntu/RHEL ecosystems confirm the vulnerab...

CVE-2019-6251

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge...

CVE-2019-6251

WebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon certain JavaScript redirections. An attacker could cause malicious web content to be displayed as if for a trusted URI. This is similar to the CVE-2018-8383 issue in Microsoft Edge...