SUSE CVE-2015-1296

The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a...

CVE-2016-1671

CVE-2016-1671 affects Google Chrome on Android versions prior to 50.0.2661.102, where mishandling of "/" and "" characters enables directory traversal via a file: URL. Root cause: improper handling in Android builds tied to net/base/escape.cc and net/base/filename_util.cc. Impact is directory tra...