CVE-2017-5006: XSS
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled object owner relationships, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5006?
CVE-2017-5006 is classified as a high severity vulnerability due to its potential for remote code execution via UXSS.
How do I fix CVE-2017-5006?
To mitigate CVE-2017-5006, upgrade Google Chrome to version 56.0.2924.76 or newer.
What types of systems are affected by CVE-2017-5006?
CVE-2017-5006 affects Google Chrome versions prior to 56.0.2924.76 on Linux, Windows, Mac, and prior to 56.0.2924.87 on Android.
What kind of attack can CVE-2017-5006 facilitate?
CVE-2017-5006 can allow attackers to execute arbitrary scripts or HTML through a crafted web page, leading to user data compromise.
Is CVE-2017-5006 a zero-day vulnerability?
CVE-2017-5006 is not a zero-day vulnerability as it was publicly disclosed and fixed in the software release.