CVE-2017-5070

chromium-browser: type confusion in v8

Published Oct 27, 2017 CVSS 3.1 · 8.8 High EPSS 32.1% KEV · Listed
Description
Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics epss

{'score': 0.803}

epss

{'score': 0.79029}

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2022-06-08'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Weaknesses
  • CWE-843

    Access of Resource Using Incompatible Type ('Type Confusion')

Sources

Status
PUBLISHED
Assigner
Chrome
Published
Updated
Oct 21, 2025, 11:55 PM
Reserved
Jan 2, 2017, 12:00 AM
Status
Analyzed
Published
Oct 27, 2017, 5:29 AM
Modified
Jun 17, 2026, 1:19 AM
Severity
Important
Public date
Jun 5, 2017, 12:00 AM