Unscored CVE-2018-20069 EUVD-2018-12644GHSA-c6vv-wc55-crp5

Failure to prevent navigation to top frame to data URLs in Navigation in Google Chrome on iOS prior to 71.0.3578.80 allowed a remote attack…

Published Jan 9, 2019 · Updated Aug 5, 2024 · Assigned by Chrome

Vendor: Google Product: Chrome Category: Browsers

Description

Failure to prevent navigation to top frame to data URLs in Navigation in Google Chrome on iOS prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of the current page via a crafted HTML page.

Affected products

Vendor	Product	Affected	Fixed
Google	Chrome	unspecified – < 71.0.3578.80	71.0.3578.80

References

https://crbug.com/890558
https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html