Remote Yes

Type Content spoofing

Description

Chromium does not properly validate access to the initial document, which allows remote attackers to spoof the address bar via a crafted web site.

AVG-109 qt5-webengine 5.7.0-7 5.7.1-1 Critical Fixed

17 Dec 2016 ASA-201612-18 AVG-109 qt5-webengine Critical multiple issues

https://bugs.chromium.org/p/chromium/issues/detail?id=630662
https://bugzilla.redhat.com/show_bug.cgi?id=1372216