CVE-2017-5016

—

CVSS 3.0

6.5 medium

EPSS

1%p68

Published

Feb 17, 2017 (Feb 17, 2017)

Modified

Jun 17, 2026

Description

Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to prevent certain UI elements from being displayed by non-visible pages, which allowed a remote attacker to show certain UI elements on a page they don't control via a crafted HTML page.

Vendors: google
Products: chrome
Weakness: CWE-1021
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.