PT-2016-2658
CVE-2016-1707
·
Published
2016-07-23
·
Updated
2024-06-15
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 52.0.2743.82
Description
The issue concerns a component of Google Chrome that fails to replace an invalid URL with the about:blank URL, allowing remote attackers to spoof the URL display via a crafted web site. This can be exploited by a remote attacker using a specially formed web site.
Recommendations
For versions prior to 52.0.2743.82, update to version 52.0.2743.82 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾