CVE-2025-0996

MEDIUM Year: 2025
CVSS v3 Score
5.4
Medium
Weakness Type
CWE-1007
View all →

Vulnerability Description

Inappropriate implementation in Browser UI in Google Chrome on Android prior to 133.0.6943.98 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High)

Related Vulnerabilities

CVE-2021-4221

MEDIUM
CVSS:4.3(Medium)

If a domain name contained a RTL character, it would cause the domain to be rendered to the right of the path. This could lead to user confusion and spoofing attacks. <br>*This bug only affects Firefo...

CWE-10072021

CVE-2021-4221

MEDIUM
CVSS:4.3(Medium)

If a domain name contained a RTL character, it would cause the domain to be rendered to the right of the path. This could lead to user confusion and spoofing attacks. <br>*This bug only affects Firefo...

CWE-10072021

CVE-2025-27611

HIGH

base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression. Versions 4.0.0, 5.0.0, and all prior to 3.0.11, are vulnerable to attackers potentially deceivi...

CWE-10072025