CVE-2019-5875
Insufficient data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
Date published : 2019-11-25
https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html