Vulnerabilities (CVE)

Filtered by CWE-1007
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-4221 2 Google, Mozilla 2 Android, Firefox 2025-04-16 N/A 4.3 MEDIUM
If a domain name contained a RTL character, it would cause the domain to be rendered to the right of the path. This could lead to user confusion and spoofing attacks. <br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*<br>*Note*: Due to a clerical error this advisory was not included in the original announcement, and was added in Feburary 2022. This vulnerability affects Firefox < 92.
CVE-2025-0996 1 Google 1 Chrome 2025-04-10 N/A 5.4 MEDIUM
Inappropriate implementation in Browser UI in Google Chrome on Android prior to 133.0.6943.98 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High)