CVE-2019-13718: Medium severity google chrome (trace event) vulnerability
Published Nov 25, 2019
·Updated
Insufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
Affected Software
2 affected components
Google Chrome<78.0.3904.70
openSUSE Backports=15.0-sp1
Event History
Nov 25, 2019
CVE Published
via MITRE·02:22 PM
Data Sourced
via MITRE·02:22 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-13718?
CVE-2019-13718 is rated as high severity due to the potential for domain spoofing.
2
How do I fix CVE-2019-13718?
To fix CVE-2019-13718, update Google Chrome to version 78.0.3904.70 or later.
3
What types of software are affected by CVE-2019-13718?
CVE-2019-13718 affects Google Chrome prior to version 78.0.3904.70 and openSUSE Backports version 15.0-sp1.
4
What is the impact of CVE-2019-13718 on users?
CVE-2019-13718 allows attackers to execute domain spoofing attacks, potentially deceiving users into visiting malicious sites.
5
How can I determine if I'm vulnerable to CVE-2019-13718?
You can determine if you're vulnerable to CVE-2019-13718 by checking if you are using an outdated version of Google Chrome prior to 78.0.3904.70.