1396 matches found
CVE-2026-78968
A flaw was found in Google Chrome's Core component. This missing authorization vulnerability allows a remote attacker, who has already compromised the renderer process, to potentially spoof the address bar by using a specially crafted HTML page. This could mislead users about the authenticity of ...
ARC-Browser-Address-Bar-Spoofing-PoC
Spoofing della barra degli indirizzi del browser ARC - iOS/iPadOS CVE-2024-25733 PoC dello spoofing della barra degli indirizzi del browser ARC - iOS/iPadOS Exploit PoC Prova di concetto root@kitploit: function spoof setTimeout = window.stop; let randomPort; do randomPort = Math.floorMath.random...
CVE-2026-79250
UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-79233
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78968
Missing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially spoof address bar via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78968
Missing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially spoof address bar via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78968
Missing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially spoof address bar via a crafted HTML page. Chromium security severity: Low...
CVE-2026-78968
Missing authorization in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially spoof address bar via a crafted HTML page. Chromium security severity: Low...
CVE-2026-79233
This vulnerability affects Google Chrome on Android prior to version 152.0.7977.65 . The issue is a UI misrepresentation in the CustomTabs component, which allowed a remote attacker to spoof the address bar using a crafted HTML page. Chromium classifies the security severity as Low . The fix is t...
CVE-2026-79250
CVE-2026-79250 is a UI misrepresentation vulnerability in Google Chrome 's Navigation component. Prior to version 152.0.7977.65 , a remote attacker could spoof the address bar using a crafted HTML page, potentially tricking users into trusting a malicious site. Chromium rates the security severit...
CVE-2026-18534
ArcSearch for iOS versions prior to 1.48.0 has a spoofing vulnerability where the address bar remains hidden after a page-initiated scroll, letting attacker-controlled content mimic browser UI elements. CVSS 7.4 (HIGH) reflects the high integrity impact requiring user interaction. No exploitation...
CVE-2026-18534 Address bar spoofing risk in affected iOS versions of Arc Search
ArcSearch for iOS versions prior to 1.48.0 could keep the address bar hidden after a page-initiated scroll, allowing attacker-controlled content to imitate browser interface elements and increasing spoofing risk...
CVE-2026-18534 Address bar spoofing risk in affected iOS versions of Arc Search
ArcSearch for iOS versions prior to 1.48.0 could keep the address bar hidden after a page-initiated scroll, allowing attacker-controlled content to imitate browser interface elements and increasing spoofing risk...
EUVD-2026-54296
A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clicks a specially crafted link containing a colon for example, https://trusted.com:[email protected]/, the address bar and security menus will...
Linux Distros Unpatched Vulnerability : CVE-2026-18487
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user click...
DEBIAN-CVE-2026-18487
A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clicks a specially crafted link containing a colon for example, https://trusted.com:[email protected]/, the address bar and security menus will...
UBUNTU-CVE-2026-18487
A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clicks a specially crafted link containing a colon for example, https://trusted.com:[email protected]/, the address bar and security menus will...
CVE-2026-18487
Technical details (affected products, versions, root cause, and fixes) are not publicly provided in the supplied documents. Monitor for updates.
CVE-2026-18487 Epiphany: address bar / host spoofing via userinfo in ephy_uri_get_decoded_host()
A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clicks a specially crafted link containing a colon for example, https://trusted.com:[email protected]/, the address bar and security menus will...
CVE-2026-18487 Epiphany: address bar / host spoofing via userinfo in ephy_uri_get_decoded_host()
A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clicks a specially crafted link containing a colon for example, https://trusted.com:[email protected]/, the address bar and security menus will...