CVE-2017-5076

CVE-2017-5076 describes an insufficient policy enforcement vulnerability in Google Chrome's Omnibox, affecting versions prior to 59.0.3071.86 on Mac, Windows, and Linux, and 59.0.3071.92 on Android. This flaw allows a remote attacker to perform domain spoofing using Internationalized Domain Name (IDN) homographs in a specially crafted domain name. Rated as MEDIUM severity with a CVSS score of 6.5, the attack requires user interaction (UI:R) but can be executed over the network (AV:N) with low attack complexity (AC:L), leading to a high impact on integrity (I:H) by deceiving users about the legitimate website. While the vulnerability has received some community discussion and media coverage, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB.