CVE-2018-17464

published 2018-11-14

CVE-2018-17464: Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL…

medium 4.3 CVSS 3.0

AV N AC L PR N UI R S U C N I L A N

Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	debian_linux	—	—
google	chrome	< 70.0.3538.67	70.0.3538.67
google	chrome	>= unspecified < 70.0.3538.67	70.0.3538.67
redhat	linux_desktop	—	—
redhat	linux_server	—	—
redhat	linux_workstation	—	—

CVSS provenance

nvd v3.0 4.3 MEDIUM CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

osv 4.3 MEDIUM