CVE-2017-5116
chromium-browser: Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android...
CVE-2017-5116 is fixed in 5 products on 1 platform, first by chromium-browser 61.0.3163.100-0ubuntu1.1378, released April 2, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.1267
96th percentile
Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| chromium-browser · Ubuntu 18.04.6 LTS (bionic) | 61.0.3163.100-0ubuntu1.1378 | chromium-browser 61.0.3163.100-0ubuntu1.1378 | Apr 2, 2018 |
| chromium-browser-l10n · Ubuntu 18.04.6 LTS (bionic) | 61.0.3163.100-0ubuntu1.1378 | chromium-browser-l10n 61.0.3163.100-0ubuntu1.1378 | Apr 2, 2018 |
| chromium-chromedriver · Ubuntu 18.04.6 LTS (bionic) | 61.0.3163.100-0ubuntu1.1378 | chromium-chromedriver 61.0.3163.100-0ubuntu1.1378 | Apr 2, 2018 |
| chromium-codecs-ffmpeg · Ubuntu 18.04.6 LTS (bionic) | 61.0.3163.100-0ubuntu1.1378 | chromium-codecs-ffmpeg 61.0.3163.100-0ubuntu1.1378 | Apr 2, 2018 |
| chromium-codecs-ffmpeg-extra · Ubuntu 18.04.6 LTS (bionic) | 61.0.3163.100-0ubuntu1.1378 | chromium-codecs-ffmpeg-extra 61.0.3163.100-0ubuntu1.1378 | Apr 2, 2018 |