CVE-2018-20069

Summary

Failure to prevent navigation to top frame to data URLs in Navigation in Google Chrome on iOS prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of the current page via a crafted HTML page.

Affected Software

Weaknesses

• Insufficient policy enforcement

ADP Enrichment

CVE Program Container

Additional References

• https://crbug.com/890558
• https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html

References

• https://crbug.com/890558
• https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html

• ←Previous
• Next→