Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.3
CVE-2019-13718: Chromium on Debian can be fooled by look‑alike web addresses
CVE-2019-13718 · published 6 years ago
Summary
The Chromium browser provided in Debian does not fully verify certain web addresses. This weakness lets someone on the internet create a domain that looks like a trusted site, tricking users into thinking they are on the real site. Install the latest Chromium update (78.0.3904.70 or newer) or apply your distribution’s security patches as soon as possible.
What to do
- Update debian chromium to version 78.0.3904.87-1.
- Update google chrome to version 78.0.3904.70 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | chromium |
< 78.0.3904.87-1 Fix: upgrade to 78.0.3904.87-1
|
| Debian:13 | debian | chromium |
< 78.0.3904.87-1 Fix: upgrade to 78.0.3904.87-1
|
| Debian:14 | debian | chromium |
< 78.0.3904.87-1 Fix: upgrade to 78.0.3904.87-1
|
| – | chrome |
< 78.0.3904.70 cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |
|
| – | opensuse | backports_sle |
15.0 cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:* |
Original advisory text
Insufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
Insufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
Severity
4.3
Medium
Timeline
Published25 Nov 2019
Updated3 Nov 2026
First seen21 Sep 2026
Track software like this
Free during beta