CVE-2019-11721

The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar

published July 23, 2019

CVSS
—
EPSS
1%
Percentile
72.1
In the wild
Unconfirmed
What it is

The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar. This allows for domain spoofing attacks as do not display as punycode text, allowing for user confusion. This vulnerability affects Firefox < 68.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01393 · 72.1th percentile
Published
2019-07-23T13:17Z
EPSS history
Timeline
  • 23 JUL 13:17Z
    The unicode latin 'kra' character can be used to spoof a standard 'k' character in the addressbar
    cvelistv5