2608 matches found
CVE-2017-5061
A race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2017-5101
CVE-2017-5101 concerns Google Chrome’s Omnibox content spoofing vulnerability. The public description specifies an inappropriate Omnibox implementation that allows a remote attacker to spoof the Omnibox contents via a crafted HTML page on Chrome versions before 60.0.3112.78 (Linux, Windows, Mac)....
CVE-2017-5106
Chromium-based Omnibox domain spoofing vulnerability CVE-2017-5106 in Google Chrome pre-60.0.3112.78 (Mac/Windows/Linux/Android). Root cause: insufficient policy enforcement allowing IDN homograph-based domain spoofing. Impact: remote attacker could spoof domain names via crafted domain names; re...
CVE-2017-5089
Removed by vendor...
CVE-2017-5101
Removed by vendor...
CVE-2017-5072
Removed by vendor...
CVE-2017-5061
Removed by vendor...
CVE-2017-5110
Removed by vendor...
CVE-2017-5104
Removed by vendor...
CVE-2017-5086
Removed by vendor...
CVE-2017-5060: Incorrect Authorization
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...
CVE-2017-5101: Undefined Security Weakness
Inappropriate implementation in Omnibox in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page...
CVE-2017-5086: Improper Input Validation
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Windows and Mac allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...
CVE-2017-5076: Improper Input Validation
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...
CVE-2017-5072: Improper Input Validation
Inappropriate implementation in Omnibox in Google Chrome prior to 59.0.3071.92 for Android allowed a remote attacker to perform domain spoofing with RTL characters via a crafted URL page...
CVE-2017-5104: Improper Input Validation
Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contents of the omnibox via a crafted HTML page...
CVE-2017-5106: Improper Input Validation
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...
CVE-2017-5105: Improper Input Validation
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...
CVE-2017-5061: Concurrent Execution using Shared Resource with Improper Synchronization
A race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
CVE-2017-5067: Improper Input Validation
An insufficient watchdog timer in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...