CVE-2017-5121

—

CVSS 3.1

8.8 high

EPSS

5%p92

Published

Oct 27, 2017 (Oct 27, 2017)

Modified

Jun 17, 2026

Description

Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to the escape analysis phase.

Vendors: google debian redhat
Products: chrome, debian linux, enterprise linux desktop, enterprise linux server, enterprise linux workstation
Weakness: CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.3%)

In the news2 stories

Microsoft provides details of a code execution vulnerability in Chrome

Security AffairsOct 19, 10:31 UTC · Oct 19, 2017Vulnerability CVE-2017-5121

Google released a Chrome 61 update that patches 2 High

Security AffairsOct 19, 10:14 UTC · Oct 19, 2017Vulnerability CVE-2017-5121 CVE-2017-5122