CVE-2017-5070highunder attackCWE-843

CVE-2017-5070: high-severity vulnerability in Google Chrome prior to 59.0.3071.86 for Linux…

Published · Updated

Follow this CVE+ Monitor Chrome+ Monitor Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 8.8epss 32%
from disclosure to weapon
Published on NVDOct 27
CISA KEV+1685d
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Fixed
3 products (12 components)
Red Hat Enterprise Linux Desktop Supplementary (v. 6) · Red Hat Enterprise Linux Server Supplementary (v. 6) · Red Hat Enterprise Linux Workstation Supplementary (v. 6)
fix ↗
Action required by CISAfederal deadline: 2022-06-22

Apply updates per vendor instructions.

In short

Google Chrome's V8 JavaScript engine had a type confusion bug that allowed attackers to run malicious code inside the browser's sandbox by tricking it into treating one type of data as another. This could let hackers take control of your browser.

Technical detail

A type confusion vulnerability in V8 allowed remote code execution within the Chrome sandbox via crafted HTML. The attack vector involves a malicious webpage that exploits incorrect type handling in the JavaScript engine, potentially leading to privilege escalation or sandbox escape depending on additional conditions.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
n/a · Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android