Security Advisory

CVE-2014-3159

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2014-07-20 10:00:00
Last updated 2024-08-06 10:35:56
Assigner Chrome
State PUBLISHED

Description

The WebContentsDelegateAndroid::OpenURLFromTab function in components/web_contents_delegate_android/web_contents_delegate_android.cc in Google Chrome before 36.0.1985.122 on Android does not properly restrict URL loading, which allows remote attackers to spoof the URL in the Omnibox via unspecified vectors.