CVE-2017-15426

The CVE-2017-15426 entry covers a vulnerability in Google Chrome's Omnibox where policy enforcement for IDN homographs could allow domain spoofing. Affected product/component: Google Chrome/Omnibox prior to version 63.0.3239.84. Root cause: insufficient policy enforcement enabling spoofed URLs vi...

CVE-2017-15425

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...

CVE-2017-15408

Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium...

CVE-2017-15427

CVE-2017-15427 is a Chrome Omnibox cross-site scripting vulnerability reported as: insufficient policy enforcement in Omnibox allowed a user to XSS themselves by dragging and dropping a javascript: URL into the URL bar, affecting Chrome versions before 63.0.3239.84. Connected sources confirm the ...

CVE-2017-15424

Removed by vendor...

CVE-2017-15427

Removed by vendor...

CVE-2017-15426

Removed by vendor...

CVE-2017-15408

Removed by vendor...

CVE-2017-15420

Removed by vendor...

CVE-2017-15426: Improper Input Validation

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...

CVE-2017-15425: Improper Input Validation

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...

CVE-2017-15424: Improper Input Validation

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...

CVE-2017-15420: Improper Input Validation

Incorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2017-15427: Improper Neutralization of Input During Web Page Generation

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar...

CVE-2017-15408: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium...

Google Chrome < 63.0.3239.84 Multiple Vulnerabilities

Binary data 700351.pasl...

Google Chrome < 68.0.3440.75 Multiple Vulnerabilities

Binary data 700361.pasl...

PT-2019-11008

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 68.0.3440.75 Description: A remote attacker could spoof the contents of the Omnibox URL bar in Google Chrome via a crafted HTML page, due to issues with JavaScript alert handling in Prompts. Recommendations: Fo...

chromium-browser: URL spoof in Omnibox

Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...

chromium-browser: URL spoof in Omnibox

Incorrect handling of reloads in Navigation in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...