Rayyan Bijoora

The issue is related to insufficient data validation in URL formatting, allowing a remote attacker to perform domain spoofing via IDN homographs using a crafted domain name. This could potentially lead to unauthorized access to protected information.

An inconsistent user interface issue was addressed with improved state management. Visiting a malicious website may lead to address bar spoofing.

The issue is related to an inconsistent user interface that could be exploited by processing a maliciously crafted text message, potentially leading to UI spoofing. This is a result of inadequate state management.

The issue is related to an inconsistent user interface that could be exploited by processing a maliciously crafted text message, potentially leading to UI spoofing.

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 85.0.4183.83 Description: The issue is related to insufficient data validation in the Omnibox feature of Google Chrome, allowing a remote attacker to perform domain spoofing via IDN homographs by using a crafted domain name. This could potentially impact the integrity of data. Recommendations: For versions prior to 85.0.4183.83, update to version 85.0.4183.83 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 83.0.4103.88 Description: The issue is related to an incorrect implementation in the user interface of Google Chrome on iOS, allowing a remote attacker to perform domain spoofing via a crafted HTML page. This can potentially impact the integrity of protected information. Recommendations: For versions prior to 83.0.4103.88, update to version 83.0.4103.88 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Google Chrome on iOS versions prior to 83.0.4103.88 Description: The issue is related to insufficient policy enforcement in the Omnibox component of Google Chrome on iOS, allowing a remote attacker to perform domain spoofing via a crafted URI. This could potentially impact the integrity of protected information. Recommendations: For Google Chrome on iOS versions prior to 83.0.4103.88, update to version 83.0.4103.88 or later to resolve the issue.

The issue arises when certain blank characters in a URL are incorrectly rendered as spaces instead of an encoded URL.

The issue allows an attacker to insert certain characters to flip domain and path information in the address bar when browsing a document hosted on an IP address.

The issue is related to insufficient policy enforcement in URL formatting, which can be exploited by a remote attacker to perform domain spoofing via a crafted domain name. This can potentially impact the integrity of data. The vulnerability is associated with an error in the resource management mechanism of the system.

The issue allows for domain spoofing attacks by combining Arabic and Indic vowel marker characters with Latin characters in a domain name. This combination can make the non-Latin character invisible to most viewers with certain font sets on the address bar, as these combined domain names do not display as punycode. The vulnerability is related to an insufficient input validation mechanism in the address bar.