Domain Spoofing Vulnerability in Google Chrome by Google
CVE-2017-5076
Key Information:
- Vendor
Google
- Vendor
- CVE Published:
- 27 October 2017
What is CVE-2017-5076?
The vulnerability allows remote attackers to perform domain spoofing in Google Chrome by exploiting insufficient policy enforcement in the Omnibox. Specifically, crafted domain names utilizing IDN homographs can deceive users, leading them to malicious sites that appear legitimate. This affects various versions of Google Chrome on multiple platforms, thereby putting users at significant risk for phishing and other malicious activity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Google Chrome prior to 59.0.3071.86 for Mac, Windows and Linux, and 59.0.3071.92 for Android Google Chrome prior to 59.0.3071.86 for Mac, Windows and Linux, and 59.0.3071.92 for Android
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved