CVE-2018-17475 : What You Need to Know

A flaw in the way history was managed on iOS in Google Chrome versions prior to 70.0.3538.67 enabled a remote attacker to deceive users by manipulating the information displayed in the Omnibox (URL bar) using a specially designed HTML page.

Understanding CVE-2018-17475

What is CVE-2018-17475?

The vulnerability in Google Chrome allowed a remote attacker to manipulate the information displayed in the Omnibox on iOS devices.

The Impact of CVE-2018-17475

The vulnerability could deceive users by displaying misleading information in the URL bar, potentially leading to phishing attacks.

Technical Details of CVE-2018-17475

Vulnerability Description

Incorrect handling of history on iOS in Google Chrome prior to 70.0.3538.67
Allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page

Affected Systems and Versions

Product: Chrome
Vendor: Google
Versions affected: < 70.0.3538.67

Exploitation Mechanism

Remote attacker could manipulate the information displayed in the Omnibox using a specially designed HTML page

Mitigation and Prevention

Immediate Steps to Take

Update Google Chrome to version 70.0.3538.67 or higher
Be cautious while entering sensitive information on websites

Long-Term Security Practices

Regularly update browsers and other software to the latest versions
Educate users about phishing techniques and safe browsing practices

Patching and Updates

Google released a stable channel update for desktop to address this vulnerability