494 matches found
CVE-2017-5106
Chromium-based Omnibox domain spoofing vulnerability CVE-2017-5106 in Google Chrome pre-60.0.3112.78 (Mac/Windows/Linux/Android). Root cause: insufficient policy enforcement allowing IDN homograph-based domain spoofing. Impact: remote attacker could spoof domain names via crafted domain names; re...
CVE-2017-5086
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Windows and Mac allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...
CVE-2017-5086
CVE-2017-5086 affects Google Chrome/Chromium Omnibox. Affected: Chromium-based browsers prior to 59.0.3071.86 on Windows/Mac; root cause: domain/address spoofing via IDN homographs in Omnibox. Impact: remote attacker could spoof the address bar content. Mitigation: upgrade to 59.0.3071.86 or newe...
CVE-2017-5076
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...
CVE-2017-5076
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...
CVE-2017-5105
Removed by vendor...
CVE-2017-5086
Removed by vendor...
CVE-2017-5076
Removed by vendor...
CVE-2017-5060
Removed by vendor...
CVE-2017-5106
Removed by vendor...
CVE-2017-5076: Improper Input Validation
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...
CVE-2017-5060: Incorrect Authorization
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...
CVE-2017-5086: Improper Input Validation
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Windows and Mac allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...
CVE-2017-5105: Improper Input Validation
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...
CVE-2017-5106: Improper Input Validation
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...
CVE-2017-15390
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...
CVE-2017-15394
Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing in permission dialogs via IDN homographs in a crafted Chrome Extension...
PT-2017-14049
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 62.0.3202.62 Opera affected versions not specified Description The issue is related to insufficient policy enforcement in extensions, allowing a remote attacker to perform domain spoofing in permission dialogs...
PT-2017-14046
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 62.0.3202.62 Opera affected versions not specified Description The issue is related to insufficient policy enforcement in the Omnibox, allowing a remote attacker to perform domain spoofing via IDN homographs in ...
PT-2017-3894
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 78.0.3904.70 Description The issue is related to insufficient validation of untrusted input in the Omnibox component of Google Chrome, allowing a remote attacker to perform domain spoofing via IDN homographs usi...