CVE-2017-5030highunder attackCWE-125

CVE-2017-5030: high-severity vulnerability in Google Chrome prior to 57.0.2987.98 for Linux…

Published · Updated

Follow this CVE+ Monitor Chrome+ Monitor Chrome prior to 57.0.2987.98 for Linux, Windows and Mac, and

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 8.8epss 41%
from disclosure to weapon
Published on NVDApr 24
CISA KEV+1871d
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Fixed
3 products (12 components)
Red Hat Enterprise Linux Desktop Supplementary (v. 6) · Red Hat Enterprise Linux Server Supplementary (v. 6) · Red Hat Enterprise Linux Workstation Supplementary (v. 6)
fix ↗
Action required by CISAfederal deadline: 2022-06-22

Apply updates per vendor instructions.

In short

Google Chrome's V8 JavaScript engine had a flaw in how it handled certain complex data structures, allowing attackers to run malicious code on a computer by tricking a user into visiting a specially designed website.

Technical detail

CVE-2017-5030 is an out-of-bounds memory access vulnerability (CWE-125) in V8's handling of complex species during object operations. Remote code execution is achieved through a crafted HTML page delivered via web browser; no authentication or special user privileges are required beyond visiting the malicious page.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
n/a · Google Chrome prior to 57.0.2987.98 for Linux, Windows and Mac, and 57.0.2987.108 for Android