Security Advisory

CVE-2016-1657

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-04-18 10:00:00

Last updated 2024-08-05 23:02:12

Assigner Chrome

CVSS score not scored

State PUBLISHED

Description

The WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL.

← Browse all CVEs View on cve.org ↗