Improper input validation in Google Chrome

CVE-2010-3247

Google Chrome before 6.0.472.53 does not properly restrict the characters in URLs, which allows remote attackers to spoof the appearance of the URL bar via homographic sequences.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.008 (52.0th percentile) — read the EPSS interpretation.

Affected products

Google Chrome
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve@mitre.org (signature, x_refsource_OVAL, Third Party Advisory, vdb-entry)
cve@mitre.org (x_refsource_CONFIRM, Patch, Issue Tracking, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)