CVE-2017-5015

—

CVSS 3.0

6.5 medium

EPSS

1%p70

Published

Feb 17, 2017 (Feb 17, 2017)

Modified

Jun 17, 2026

Description

Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled Unicode glyphs, which allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.

Vendors: google
Products: chrome
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.