CVE-2016-5163: Medium severity google chrome (trace event) vulnerability
The bidirectional-text implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not ensure left-to-right (LTR) rendering of URLs, which allows remote attackers to spoof the address bar via crafted right-to-left (RTL) Unicode text, related to omnibox/SuggestionView.java and omnibox/UrlBar.java in Chrome for Android.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5163?
The severity of CVE-2016-5163 is classified as high due to its potential to allow phishing attacks through address bar spoofing.
How do I fix CVE-2016-5163?
To mitigate CVE-2016-5163, users should update Google Chrome to version 53.0.2785.89 or later on Windows and OS X, or 53.0.2785.92 or later on Linux.
Which versions of Google Chrome are affected by CVE-2016-5163?
CVE-2016-5163 affects Google Chrome versions prior to 53.0.2785.89 on Windows and OS X, and before 53.0.2785.92 on Linux.
What does CVE-2016-5163 exploit?
CVE-2016-5163 exploits a vulnerability in the bidirectional-text implementation that fails to properly render URLs from right-to-left Unicode text.
Can CVE-2016-5163 be exploited by remote attackers?
Yes, CVE-2016-5163 can be exploited by remote attackers to spoof the address bar, misleading users into believing they are visiting legitimate websites.