Code injection

Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

CVE-2019-5781

Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

CVE-2019-5777

The CVE-2019-5777 entry concerns Google Chrome’s Omnibox where an incorrect handling of a confusable character allowed a remote attacker to spoof the URL bar with a crafted domain name, affecting Chrome prior to version 72.0.3626.81. The underlying issue is in the Omnibox domain-name processing (...

CVE-2019-5775

Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

CVE-2018-20070

Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

CVE-2018-17459

Incorrect handling of clicks in the omnibox in Navigation in Google Chrome prior to 69.0.3497.92 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

Hardcoded credentials

Incorrect handling of clicks in the omnibox in Navigation in Google Chrome prior to 69.0.3497.92 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2018-16079

A race condition between permission prompts and navigations in Prompts in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2018-6160

CVE-2018-6160 concerns Google Chrome (iOS) where JavaScript/HTML crafted content allowed a remote attacker to spoof the Omnibox (URL bar). The connected Chrome/Chromium notes confirm this as a URL spoof issue in Chrome on iOS and tie the vulnerability to the Chromium 68.0.3440.75 release family. ...

CVE-2018-6165

Removed by vendor...

CVE-2018-6160

Removed by vendor...

CVE-2018-6165

CVE-2018-6165 affects Google Chrome/Chromium: URL spoofing in the Omnibox due to incorrect handling of reloads in Navigation prior to 68.0.3440.75. The issue is described as a URL spoof vulnerability in the Omnibox and has been addressed in Chrome/Chromium updates (e.g., 68.0.3440.75/68.x). Publi...

CVE-2018-18357

Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

Code injection

Incorrect handling of bidirectional domain names with RTL characters in Omnibox in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

UBUNTU-CVE-2018-18348

Incorrect handling of bidirectional domain names with RTL characters in Omnibox in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

Google Chrome Omnibox Address Bar Forgery Vulnerability (CNVD-2019-01582)

Google Chrome is a web browser developed by Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in Omnibox in Google Chrome versions prior to 66.0.3359.106. A remote attacker can exploit this vulnerability to spoof the content of Omnibox URL bar with the help of...

Design/Logic Flaw

Missing confusable characters in Internationalization in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

CVE-2018-6102

CVE-2018-6102 affects Google Chrome/Chromium, enabling an attacker to spoof the Omnibox (URL bar) via a crafted domain name. The vulnerability is described as a URL spoofing issue in Omnibox and is fixed in Chrome/Chromium around version 66.0.3359.117 (example Debian update notes reference 66.0.3...

Hardcoded credentials

Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2018-17473

Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...