CVE-2022-34479

A malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks. This bug only affects Thunderbird for Linux. Other operating systems are unaffected.. This vulnerability affects...

CVE-2022-34479

A malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks. This bug only affects Thunderbird for Linux. Other operating systems are unaffected.. This vulnerability affects...

PT-2022-27973 · Apple +4 · Ios +6

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.4 iPadOS versions prior to 16.4 Description: A spoofing issue existed in the handling of URLs, which was addressed with improved input validation. Visiting a malicious website may lead to address bar spoofing...

VulnCheck KEV: CVE-2022-46705

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, Safari 16.2. Visiting a malicious website may lead to address bar spoofing...

About the security content of Safari 16.2

About the security content of Safari 16.2 This document describes the security content of Safari 16.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

UBUNTU-CVE-2022-4144

An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxlphys2virt function does not check the size of the structure pointed to by the guest physical address, potentially reading past the end of the bar space into adjacent pages. A malicious guest user could use th...

Information Disclosure

chromium is vulnerable to information disclosure. The vulnerability exists due to Inappropriate implementation in Custom Tabs in Google Chrome on Android which allows a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2022-3447

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 106.0.5249.119 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: High...

Design/Logic Flaw

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 106.0.5249.119 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: High...

CVE-2022-3447

CVE-2022-3447 refers to an issue in Google Chrome on Android prior to 106.0.5249.119 where an inappropriate implementation in Custom Tabs allowed a remote attacker to spoof the Omnibox (URL bar) contents via a crafted HTML page. The vulnerability is associated with Chromium’s High severity and is...

CVE-2022-3447

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 106.0.5249.119 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: High...

CVE-2022-38163

A Drag and Drop spoof vulnerability was discovered in F-Secure SAFE Browser for Android and iOS version 19.0 and below. Drag and drop operation by user on address bar could lead to a spoofing of the address bar...

Design/Logic Flaw

A Drag and Drop spoof vulnerability was discovered in F-Secure SAFE Browser for Android and iOS version 19.0 and below. Drag and drop operation by user on address bar could lead to a spoofing of the address bar...

CVE-2022-38163

A Drag and Drop spoof vulnerability was discovered in F-Secure SAFE Browser for Android and iOS version 19.0 and below. Drag and drop operation by user on address bar could lead to a spoofing of the address bar...

PT-2022-24250 · F Secure · F-Secure Safe Browser

Name of the Vulnerable Software and Affected Versions: F-Secure SAFE Browser versions prior to 19.0 Description: A Drag and Drop spoof vulnerability was discovered, allowing a spoofing of the address bar when a user performs a drag and drop operation on the address bar. Recommendations: For...

CVE-2022-3660

CVE-2022-3660 is described as an Inappropriate implementation in Full screen mode affecting Google Chrome on Android prior to 107.0.5304.62, allowing a remote attacker to hide the Omnibox contents via a crafted HTML page (Chromium security severity: Medium). Connected documents corroborate the is...

CVE-2022-3660

Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 107.0.5304.62 allowed a remote attacker to hide the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

Google Chrome has an unspecified vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in versions of Google Chrome prior to 106.0.5249.119, which stems from an improper implementation in the customization tab and could be exploited by remote attackers to spoof the content of the Omnibox URL bar via a...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in versions of Google Chrome prior to 106.0.5249.119, which stems from an improper implementation in the customization tab and could be exploited by remote attackers to spoof the content of the Omnibox URL bar via a...

CVE-2022-20415

In handleFullScreenIntent of StatusBarNotificationActivityStarter.java, there is a possible bypass of the restriction of starting activity from background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...