← Back to browse · API

CVE-2017-5070

Severity
HIGH
CVSS
8.8
EPSS
0.31212
Risk score
71.12
CISA KEV
Yes
PoC
No
Published
2017-10-27
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2017-14179, GHSA-G97F-3HRX-C447
Products
Google:Chromium V8, n/a:Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android
Sources
cisa.gov CVE-2017-5070
euvd EUVD-2017-14179

Description

Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

References