CVE-2017-15425 PUBLISHED

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.

EPSS 0.66% · 70.9th percentile

Risk Scores

EPSS Score
0.66%
70.9th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSchromium-browser0, 45.0.2454.101-0ubuntu1.1201, 47.0.2526.73-0ubuntu1.1218
Ubuntu:14.04:LTSchromium-browser62.0.3202.62-0ubuntu0.14.04.1204, 62.0.3202.75-0ubuntu0.14.04.1211, 62.0.3202.89-0ubuntu0.14.04.1213
Ubuntu:18.04:LTSchromium-browser61.0.3163.100-0ubuntu1.1378, 62.0.3202.62-0ubuntu0.17.10.1380, 62.0.3202.89-0ubuntu1.1386
Ubuntu:16.04:LTSoxide-qt1.11.4-0ubuntu1, 1.11.5-0ubuntu1, 1.12.5-0ubuntu1

Timeline

References

Open in Interactive Console →