CVE-2017-5008 PUBLISHED

Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed attacker controlled JavaScript to be run during the invocation of a private script method, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.

EPSS 0.41% · 61.1th percentile

Risk Scores

EPSS Score
0.41%
61.1th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSoxide-qt1.2.5-0ubuntu0.14.04.1, 1.3.4-0ubuntu0.14.04.1, 1.4.2-0ubuntu0.14.04.1
Ubuntu:14.04:LTSchromium-browser51.0.2704.79-0ubuntu0.14.04.1.1121, 29.0.1547.65-0ubuntu2, 31.0.1650.63-0ubuntu1~20131204.1
Ubuntu:16.04:LTSoxide-qt1.19.4-0ubuntu0.16.04.1, 1.11.5-0ubuntu1, 1.12.5-0ubuntu1
Ubuntu:16.04:LTSchromium-browser45.0.2454.101-0ubuntu1.1201, 47.0.2526.73-0ubuntu1.1218, 47.0.2526.106-0ubuntu1.1221

Timeline

References

Open in Interactive Console →