CVE-2025-0996

Inappropriate implementation in Browser UI in Google Chrome on Android prior to 133.0.6943.98 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: High...

Google Chrome Omnibox Replacement

The vulnerability of the Google Chrome browser is related to incorrect data processing. Exploiting this vulnerability allows a malicious actor to replace the content in the Omnibox URL bar using IDN homographs...

Google Chrome URL Formatter XSS

The vulnerability of the URL Formatter component in Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace the content of the Omnibox component URL through a specially created domain name...

Google Chrome Omnibox Content Injection

The vulnerability of Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace the content of the Omnibox component URL through a specially created domain name...

Google Chrome Pop-up Content Replacement

The vulnerability of Google Chrome lies in the lack of protection when processing pop-up windows in full-screen mode. Exploiting this vulnerability allows a remote attacker to replace the content of the Omnibox component URL using a specially created HTML page...

Google Chrome Omnibox Content Injection

The vulnerability of Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace the content of the Omnibox component URL using a specially created HTML page...

Google Chrome < 63.0.3239.84 Multiple Vulnerabilities

Binary data 700351.pasl...

OPENSUSE-SU-2017:1098-1 Security update for chromium

This update to Chromium 58.0.3029.81 fixes the following security issues bsc1035103: - CVE-2017-5057: Type confusion in PDFium - CVE-2017-5058: Heap use after free in Print Preview - CVE-2017-5059: Type confusion in Blink - CVE-2017-5060: URL spoofing in Omnibox - CVE-2017-5061: URL spoofing in...

UBUNTU-CVE-2015-1296

The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...

PT-2014-2256

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 21.0.1180.82 on iOS on iPad devices Description The issue allows remote attackers to spoof the Omnibox URL via vectors involving SSL error messages. Recommendations For Google Chrome versions prior to 21.0.1180....