2609 matches found
CVE-2017-5089
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.104 for Mac allowed a remote attacker to perform domain spoofing via a crafted domain name...
CVE-2017-5067
CVE-2017-5067 affects Google Chrome before 58.0.3029.81 on Linux/Windows/Mac. The root cause is an insufficient watchdog timer in navigation, enabling a crafted HTML page to spoof the Omnibox (URL bar). The practical impact is UI spoofing through the address bar, potentially deceiving users. The ...
CVE-2017-5072
CVE-2017-5072 affects Google Chrome/Chromium Omnibox. Insecure implementation allowed a remote attacker to spoof the address bar using RTL characters via a crafted URL page, reported for Android and tied to Chrome/Chromium versions around 59.x. The vulnerability arises from the Omnibox component’...
CVE-2017-5076
CVE-2017-5076 affects the Omnibox (address bar) in Chromium/Google Chrome prior to 59.0.3071.86 (Desktop) and 59.0.3071.92 (Android); a domain spoofing vulnerability via IDN homographs is disclosed, enabling a remote attacker to misrepresent a domain. Connected sources confirm this as a content s...
CVE-2017-5086
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Windows and Mac allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...
CVE-2017-5106
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...
CVE-2017-5101
Inappropriate implementation in Omnibox in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page...
CVE-2017-5067
An insufficient watchdog timer in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2017-5104
Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contents of the omnibox via a crafted HTML page...
CVE-2017-5061
A race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2017-5105
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...
CVE-2017-5110
CVE-2017-5110 affects Chromium/Chrome Web Payments, specifically the payments dialog spoofing vulnerability in the Omnibox/payment UI. The root cause is an inappropriate implementation of the web payments API on blob: and data: schemes, enabling a remote attacker to spoof the Omnibox contents via...
CVE-2017-5104
Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contents of the omnibox via a crafted HTML page...
CVE-2017-5086
Removed by vendor...
CVE-2017-5061
Removed by vendor...
CVE-2017-5110
Removed by vendor...
CVE-2017-5104
Removed by vendor...
CVE-2017-5101
Removed by vendor...