CVE-2019-5812

CVE-2019-5812 describes a domain spoofing vulnerability in Google Chrome prior to version 74.0.3729.108, specifically impacting the iOS UI due to inadequate security UI. This flaw allowed a remote attacker to mislead users about the website they were visiting through a crafted HTML page, affecting various Chrome installations across Apple, Fedora, and Google platforms. Rated Medium severity with a CVSS score of 6.5, the attack requires user interaction (UI:R) but can be executed remotely (AV:N) with low complexity (AC:L), potentially leading to high integrity impacts (I:H) without affecting confidentiality or availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in the CISA KEV catalog, though it garnered some community discussion and media coverage at the time of disclosure.