CVE-2017-5008: XSS
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed attacker controlled JavaScript to be run during the invocation of a private script method, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5008?
CVE-2017-5008 has a medium severity level by the Common Vulnerability Scoring System (CVSS).
How do I fix CVE-2017-5008?
To fix CVE-2017-5008, update Google Chrome to version 56.0.2924.76 or later.
What are the potential exploits related to CVE-2017-5008?
CVE-2017-5008 allows remote attackers to inject arbitrary scripts or HTML through a crafted HTML page.
Which versions of Google Chrome are affected by CVE-2017-5008?
CVE-2017-5008 affects Google Chrome versions prior to 56.0.2924.76 for Linux, Windows, and Mac, and prior to 56.0.2924.87 for Android.
What type of vulnerability is CVE-2017-5008 classified as?
CVE-2017-5008 is classified as a Universal Cross-Site Scripting (UXSS) vulnerability.