CVE-2018-17475

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 70.0.3538.67

Description The issue is related to incorrect handling of history on iOS in Navigation, allowing a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. This is due to insufficient input validation, which can be exploited by a remote attacker to manipulate the Omnibox component.

Recommendations For versions prior to 70.0.3538.67, update to version 70.0.3538.67 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted HTML pages that may exploit this issue until a patch is applied.