CVE-2017-5116

—

CVSS 3.1

8.8 high

EPSS

13%p96

Published

Oct 27, 2017 (Oct 27, 2017)

Modified

Jun 17, 2026

Description

Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Vendors: google redhat debian
Products: chrome, enterprise linux desktop, enterprise linux server, enterprise linux workstation, debian linux
Weakness: CWE-843
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (12.7%)

In the news2 stories

Google awards record $112,500 bug bounty for Android exploit chain

CyberScoopJan 19, 17:54 UTC · Jan 19, 2018Exploit / PoC in the wildCVE-2017-5116 CVE-2017-14904

Google awarded Chinese hacker record $112,500 for Android exploit chain

Security AffairsJan 22, 05:52 UTC · Jan 22, 2018Vulnerability CVE-2017-5116 CVE-2017-14904