| Package | Affected versions | Patched versions |
|---|---|---|
| chrome | ≤ 49.0.2623.112 | |
| suse package hub for suse linux enterprise | = 12 |
The WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free