Candidate: CVE-2019-13761 PublicDate: 2019-12-10 22:15:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13761 https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html https://crbug.com/1002687 Description: Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. Ubuntu-Description: Notes: Mitigation: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N [4.3 MEDIUM] Patches_chromium-browser: upstream_chromium-browser: released (79.0.3945.79-1) precise/esm_chromium-browser: DNE trusty_chromium-browser: ignored (out of standard support) trusty/esm_chromium-browser: DNE xenial_chromium-browser: released (79.0.3945.79-0ubuntu0.16.04.1) bionic_chromium-browser: released (79.0.3945.79-0ubuntu0.18.04.1) disco_chromium-browser: released (79.0.3945.79-0ubuntu0.19.04.3) eoan_chromium-browser: released (79.0.3945.79-0ubuntu0.19.10.2) devel_chromium-browser: released (79.0.3945.79-0ubuntu1)