CVE-2017-5101

Removed by vendor...

CVE-2017-5072

Removed by vendor...

CVE-2017-5067

CVE-2017-5067 affects Google Chrome before 58.0.3029.81 on Linux/Windows/Mac. The root cause is an insufficient watchdog timer in navigation, enabling a crafted HTML page to spoof the Omnibox (URL bar). The practical impact is UI spoofing through the address bar, potentially deceiving users. The ...

CVE-2017-5061

A race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2017-5110

CVE-2017-5110 affects Chromium/Chrome Web Payments, specifically the payments dialog spoofing vulnerability in the Omnibox/payment UI. The root cause is an inappropriate implementation of the web payments API on blob: and data: schemes, enabling a remote attacker to spoof the Omnibox contents via...

CVE-2017-5101

CVE-2017-5101 concerns Google Chrome’s Omnibox content spoofing vulnerability. The public description specifies an inappropriate Omnibox implementation that allows a remote attacker to spoof the Omnibox contents via a crafted HTML page on Chrome versions before 60.0.3112.78 (Linux, Windows, Mac)....

CVE-2017-5090

Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.115 for Mac allowed a remote attacker to perform domain spoofing via a crafted domain name containing a U+0620 character, aka Apple rdar problem 32458012...

CVE-2017-5089

CVE-2017-5089 is a domain spoofing vulnerability in the Chromium/Omnibox component. The issue is described as insufficient policy enforcement that allows a remote attacker to spoof a domain via a crafted domain name in Chrome/Chromium before version 59.0.3071.104 (e.g., Chromium/Chromium-browser)...

CVE-2017-5104

Removed by vendor...

chromium-browser: url spoofing in omnibox

Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...

chromium-browser: url spoofing in omnibox

An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

chromium-browser: ui spoofing in blink

Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2017-15389

An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 35 security fixes in this release, including: 762930 High CVE-2017-5124: UXSS with MHTML. Reported by Anonymous on 2017-09-07 749147 High CVE-2017-5125: Heap overflow in Skia. Reported by Anonymous on 2017-07-26 760455 High CVE-2017-5126: Use after free in PDFium...

Google Chrome < 60.0.3112.78 Multiple Vulnerabilities

Binary data 700171.pasl...

chromium-browser: url spoofing in omnibox

Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...

chromium-browser: ui spoofing in payments dialog

Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page...

chromium-browser: ui spoofing in browser

Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contents of the omnibox via a crafted HTML page...

chromium-browser: url spoofing in omnibox

Inappropriate implementation in Omnibox in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page...

chromium-browser: url spoofing in omnibox

Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...