CVE-2017-5026: Medium severity Google Chrome vulnerability
Published Feb 17, 2017
·Updated
Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to prevent alerts from being displayed by swapped out frames, which allowed a remote attacker to show alerts on a page they don't control via a crafted HTML page.
Affected Software
1 affected component
Google Chrome<=55.0.2883.87
Event History
Feb 17, 2017
CVE Published
via MITRE·07:45 AM
Data Sourced
via MITRE·07:45 AM
DescriptionWeakness
Data Sourced
via NVD·07:59 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-5026?
CVE-2017-5026 is rated as a medium severity vulnerability due to its potential impact on user experience and security.
2
How do I fix CVE-2017-5026?
To fix CVE-2017-5026, users should update Google Chrome to version 56.0.2924.76 or later.
3
What platforms are affected by CVE-2017-5026?
CVE-2017-5026 affects Google Chrome on Linux, Windows, and Mac operating systems.
4
What type of attack is CVE-2017-5026 associated with?
CVE-2017-5026 is associated with remote code execution attacks through the manipulation of swapped out frames.
5
What is the main issue caused by CVE-2017-5026?
The main issue caused by CVE-2017-5026 is that it allows attackers to display alerts on pages they do not control.