CVE-2016-5163

The bidirectional-text implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not ensure left-to-right…

published September 11, 2016

CVSS
—
EPSS
1%
Percentile
68.4
In the wild
Unconfirmed
What it is

The bidirectional-text implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not ensure left-to-right (LTR) rendering of URLs, which allows remote attackers to spoof the address bar via crafted right-to-left (RTL) Unicode text, related to omnibox/SuggestionView.java and omnibox/UrlBar.java in Chrome for Android.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01219 · 68.4th percentile
Published
2016-09-11T10:00Z
EPSS history
Timeline
  • 11 SEP 10:00Z
    The bidirectional-text implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not ensure left-to-right…
    cvelistv5