CVE-2017-5090

CVE-2017-5090 affects Google Chrome on macOS, where the Omnibox failed to enforce domain policy, enabling a remote attacker to spoof domains using a crafted name containing U+0620. Impact is domain spoofing; attack details describe exploitation remotely via the Omnibox. The vulnerability is assoc...

CVE-2017-5090

Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.115 for Mac allowed a remote attacker to perform domain spoofing via a crafted domain name containing a U+0620 character, aka Apple rdar problem 32458012...