Incorrect implementation in user interface in Google Chrome on iOS prior to 83.0.4103.88 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
https://www.debian.org/security/2020/dsa-4714
https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop.html