CVE-2017-5007 PUBLISHED

Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled the sequence of events when closing a page, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.

EPSS 5.62% · 90.3th percentile

Risk Scores

EPSS Score
5.62%
90.3th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSoxide-qt1.17.9-0ubuntu0.14.04.1, 1.11.4-0ubuntu0.14.04.1, 1.12.5-0ubuntu0.14.04.1
Ubuntu:16.04:LTSchromium-browser0, 45.0.2454.101-0ubuntu1.1201, 47.0.2526.73-0ubuntu1.1218
Ubuntu:14.04:LTSchromium-browser51.0.2704.79-0ubuntu0.14.04.1.1121, 29.0.1547.65-0ubuntu2, 31.0.1650.63-0ubuntu1~20131204.1
Ubuntu:16.04:LTSoxide-qt0, 1.9.5-0ubuntu1, 1.10.3-0ubuntu0.15.10.1

Timeline

References

Open in Interactive Console →