First published: Mon Apr 18 2016(Updated: )
The WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL.
Credit: cve-coordination@google.com
Affected Software | Affected Version | How to fix |
---|---|---|
Debian Debian Linux | =8.0 | |
Novell Suse Package Hub For Suse Linux Enterprise | =12 | |
openSUSE Leap | =42.1 | |
Google Chrome | <=49.0.2623.112 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.