Skip to content
OpenAdvisories
Unscored CVE-2019-5873 EUVD-2019-15444GHSA-cqv9-cwr5-p6j4

Insufficient policy validation in navigation in Google Chrome on iOS prior to 77.0.3865.75 allowed a remote attacker to spoof the contents …

Published Nov 25, 2019 · Updated Aug 4, 2024 · Assigned by Chrome

Vendor: Google Product: Chrome Package: chromium-browser Category: Browsers Ecosystem: Ubuntu

Description

Insufficient policy validation in navigation in Google Chrome on iOS prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

Affected products

VendorProductAffectedFixed
Google Chrome unspecified – < 77.0.3865.75 77.0.3865.75

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS chromium-browser 77.0.3865.90-0ubuntu0.18.04.1 —
Ubuntu 16.04 LTS chromium-browser 77.0.3865.90-0ubuntu0.16.04.1 —

References