CVE-2017-5090: Google Chrome

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.115 for Mac allowed a remote attacker to perform domain spoofing via a crafted domain name containing a U+0620 character, aka Apple rdar problem 32458012.

Affected products

• Google Chrome: before 59.0.3071.115 (fixed in 59.0.3071.115)

Published 2017-10-27. Last modified 2026-06-17.