The CustomButton::AcceleratorPressed function in ui/views/controls/button/custom_button.cc in Google Chrome before 48.0.2564.82 allows remote attackers to spoof URLs via vectors involving an unfocused custom button.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Chrome | * | 47.0.2526.106 |