{"id":"CVE-2017-5040","aliases":["DSA-3810-1","EUVD-2017-14149","GHSA-2gmm-8x35-3cmg","MGASA-2017-0111","RHSA-2017:0499","UBUNTU-CVE-2017-5040","USN-3236-1","openSUSE-SU-2017:0738-1","openSUSE-SU-2017:0740-1"],"status":"published","title":"V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for...","description":"V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a crafted HTML page.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.27434,"percentile":0.98078,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2017-03-10T00:00:00Z","modified":"2026-06-29T10:15:36Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"chromium-browser","fixed_in":["58.0.3029.81-0ubuntu0.14.04.1172"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"oxide-qt","fixed_in":["1.21.5-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"chromium-browser","fixed_in":["57.0.2987.98-0ubuntu0.16.04.1276"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"oxide-qt","fixed_in":["1.21.5-0ubuntu0.16.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:8","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"57.0.2987.98-1~deb8u1"}]}],"versions":["41.0.2272.118-1","42.0.2311.135-1","42.0.2311.135-1~deb8u1","42.0.2311.135-2","42.0.2311.90-1","42.0.2311.90-1~deb8u1","42.0.2311.90-2","43.0.2357.124-1","43.0.2357.124-2","43.0.2357.124-3","43.0.2357.130-1","43.0.2357.65-1","43.0.2357.65-1~deb8u1","43.0.2357.81-1","44.0.2403.107-1","44.0.2403.107-2","44.0.2403.157-1","44.0.2403.89-1","44.0.2403.89-1~deb8u1","45.0.2454.101-1","45.0.2454.85-1","45.0.2454.85-1~deb8u1","46.0.2490.13-1","46.0.2490.71-1","46.0.2490.71-1~deb8u1","47.0.2526.111-1","47.0.2526.16-1","47.0.2526.73-1","47.0.2526.73-1~deb8u1","47.0.2526.80-1","47.0.2526.80-1~deb8u1","47.0.2526.80-2","47.0.2526.80-3","48.0.2564.116-1","48.0.2564.116-1~deb8u1","48.0.2564.23-1","48.0.2564.82-1","48.0.2564.82-1~deb8u1","48.0.2564.82-2","49.0.2623.108-1","49.0.2623.108-1~deb8u1","49.0.2623.108-2","49.0.2623.75-1","49.0.2623.75-1~deb8u1","49.0.2623.75-2","49.0.2623.87-1","49.0.2623.87-1~deb8u1","50.0.2661.75-1","50.0.2661.75-1~deb8u1","50.0.2661.75-2","50.0.2661.94-1","50.0.2661.94-1~deb8u1","51.0.2704.63-1","51.0.2704.63-1~deb8u1","51.0.2704.63-2","51.0.2704.79-1","51.0.2704.79-1~deb8u1","52.0.2743.116-1","52.0.2743.116-1~deb8u1","52.0.2743.116-2","52.0.2743.82-1","52.0.2743.82-1~deb8u1","52.0.2743.82-2","52.0.2743.82-3","52.0.2743.82-4","53.0.2785.113-1","53.0.2785.113-1~deb8u1","53.0.2785.143-1","53.0.2785.143-1+exp1","53.0.2785.143-1~deb8u1","53.0.2785.89-1","53.0.2785.89-1~deb8u1","53.0.2785.92-1","53.0.2785.92-2","53.0.2785.92-3","54.0.2840.101-1","55.0.2883.75-1","55.0.2883.75-1~deb8u1","55.0.2883.75-2","55.0.2883.75-2+exp1","55.0.2883.75-2+exp2","55.0.2883.75-2+exp3","55.0.2883.75-3","55.0.2883.75-4","55.0.2883.75-5","55.0.2883.75-6","56.0.2924.76-1","56.0.2924.76-1~deb8u1","56.0.2924.76-2","56.0.2924.76-3","56.0.2924.76-4","56.0.2924.76-5"],"bundled":18},{"source":"osv","ecosystem":"Mageia:5","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"57.0.2987.133-1.mga5"}]}],"bundled":45},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:57.0.2987.98-1.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"chromium-browser-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:57.0.2987.98-1.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"58.0.3029.81-0ubuntu0.14.04.1172"}]}],"versions":["29.0.1547.65-0ubuntu2","31.0.1650.63-0ubuntu1~20131204.1","32.0.1700.107-0ubuntu1~20140204.977.1","33.0.1750.152-0ubuntu1~pkg995.1","34.0.1847.116-0ubuntu2","36.0.1985.125-0ubuntu1.14.04.0~pkg1029","37.0.2062.94-0ubuntu0.14.04.1~pkg1042","37.0.2062.120-0ubuntu0.14.04.1~pkg1049","38.0.2125.111-0ubuntu0.14.04.1.1061","39.0.2171.65-0ubuntu0.14.04.1.1064","40.0.2214.94-0ubuntu0.14.04.1.1068","40.0.2214.111-0ubuntu0.14.04.1.1069","41.0.2272.76-0ubuntu0.14.04.1.1076","43.0.2357.81-0ubuntu0.14.04.1.1089","43.0.2357.130-0ubuntu0.14.04.1.1092","44.0.2403.89-0ubuntu0.14.04.1.1095","45.0.2454.85-0ubuntu0.14.04.1.1097","45.0.2454.101-0ubuntu0.14.04.1.1099","47.0.2526.73-0ubuntu0.14.04.1.1106","47.0.2526.106-0ubuntu0.14.04.1.1107","48.0.2564.82-0ubuntu0.14.04.1.1108","48.0.2564.116-0ubuntu0.14.04.1.1111","49.0.2623.87-0ubuntu0.14.04.1.1112","49.0.2623.108-0ubuntu0.14.04.1.1113","50.0.2661.102-0ubuntu0.14.04.1.1117","51.0.2704.79-0ubuntu0.14.04.1.1121","52.0.2743.116-0ubuntu0.14.04.1.1134","53.0.2785.143-0ubuntu0.14.04.1.1142","53.0.2785.143-0ubuntu0.14.04.1.1145"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"oxide-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-0ubuntu0.14.04.1"}]}],"versions":["1.0.0~bzr437-0ubuntu1","1.0.0~bzr452-0ubuntu1","1.0.0~bzr475-0ubuntu1","1.0.0~bzr490-0ubuntu1","1.0.0~bzr501-0ubuntu1","1.0.0~bzr501-0ubuntu2","1.0.4-0ubuntu0.14.04.1","1.0.5-0ubuntu0.14.04.1","1.1.2-0ubuntu0.14.04.1","1.2.5-0ubuntu0.14.04.1","1.3.4-0ubuntu0.14.04.1","1.4.2-0ubuntu0.14.04.1","1.4.3-0ubuntu0.14.04.1","1.5.5-0ubuntu0.14.04.3","1.5.6-0ubuntu0.14.04.2","1.6.5-0ubuntu0.14.04.1","1.6.6-0ubuntu0.14.04.1","1.7.8-0ubuntu0.14.04.1","1.7.9-0ubuntu0.14.04.1","1.8.4-0ubuntu0.14.04.2","1.9.1-0ubuntu0.14.04.2","1.9.5-0ubuntu0.14.04.1","1.10.3-0ubuntu0.14.04.1","1.11.3-0ubuntu0.14.04.1","1.11.4-0ubuntu0.14.04.1","1.12.5-0ubuntu0.14.04.1","1.12.6-0ubuntu0.14.04.1","1.12.7-0ubuntu0.14.04.1","1.13.6-0ubuntu0.14.04.1","1.14.7-0ubuntu0.14.04.1","1.14.9-0ubuntu0.14.04.1","1.15.7-0ubuntu0.14.04.1","1.15.8-0ubuntu0.14.04.1","1.16.5-0ubuntu0.14.04.1","1.17.7-0ubuntu0.14.04.1","1.17.9-0ubuntu0.14.04.1","1.18.3-0ubuntu0.14.04.1","1.18.5-0ubuntu0.14.04.1","1.19.4-0ubuntu0.14.04.1","1.20.4-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"57.0.2987.98-0ubuntu0.16.04.1276"}]}],"versions":["45.0.2454.101-0ubuntu1.1201","47.0.2526.73-0ubuntu1.1218","47.0.2526.106-0ubuntu1.1221","48.0.2564.82-0ubuntu1.1222","48.0.2564.116-0ubuntu1.1229","49.0.2623.87-0ubuntu1.1232","49.0.2623.108-0ubuntu1.1233","50.0.2661.102-0ubuntu0.16.04.1.1237","51.0.2704.79-0ubuntu0.16.04.1.1242","52.0.2743.116-0ubuntu0.16.04.1.1250","53.0.2785.143-0ubuntu0.16.04.1.1254","53.0.2785.143-0ubuntu0.16.04.1.1257","55.0.2883.87-0ubuntu0.16.04.1263","56.0.2924.76-0ubuntu0.16.04.1268"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"oxide-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-0ubuntu0.16.04.1"}]}],"versions":["1.9.5-0ubuntu1","1.10.3-0ubuntu0.15.10.1","1.10.3-0ubuntu0.15.10.2","1.11.3-0ubuntu3","1.11.4-0ubuntu1","1.11.5-0ubuntu1","1.12.5-0ubuntu1","1.12.6-0ubuntu1","1.12.7-0ubuntu1","1.13.6-0ubuntu1","1.14.7-0ubuntu1","1.14.9-0ubuntu0.16.04.1","1.15.7-0ubuntu0.16.04.1","1.15.8-0ubuntu0.16.04.1","1.16.5-0ubuntu0.16.04.1","1.17.7-0ubuntu0.16.04.1","1.17.9-0ubuntu0.16.04.1","1.18.3-0ubuntu0.16.04.1","1.18.5-0ubuntu0.16.04.1","1.19.4-0ubuntu0.16.04.1","1.20.4-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libv8-3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.14.5.8-5ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libv8-3.14","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.14.5.8-11ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"oxide-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-0ubuntu0.14.04.1"}]}],"versions":["1.0.0~bzr437-0ubuntu1","1.0.0~bzr452-0ubuntu1","1.0.0~bzr475-0ubuntu1","1.0.0~bzr490-0ubuntu1","1.0.0~bzr501-0ubuntu1","1.0.0~bzr501-0ubuntu2","1.0.4-0ubuntu0.14.04.1","1.0.5-0ubuntu0.14.04.1","1.1.2-0ubuntu0.14.04.1","1.2.5-0ubuntu0.14.04.1","1.3.4-0ubuntu0.14.04.1","1.4.2-0ubuntu0.14.04.1","1.4.3-0ubuntu0.14.04.1","1.5.5-0ubuntu0.14.04.3","1.5.6-0ubuntu0.14.04.2","1.6.5-0ubuntu0.14.04.1","1.6.6-0ubuntu0.14.04.1","1.7.8-0ubuntu0.14.04.1","1.7.9-0ubuntu0.14.04.1","1.8.4-0ubuntu0.14.04.2","1.9.1-0ubuntu0.14.04.2","1.9.5-0ubuntu0.14.04.1","1.10.3-0ubuntu0.14.04.1","1.11.3-0ubuntu0.14.04.1","1.11.4-0ubuntu0.14.04.1","1.12.5-0ubuntu0.14.04.1","1.12.6-0ubuntu0.14.04.1","1.12.7-0ubuntu0.14.04.1","1.13.6-0ubuntu0.14.04.1","1.14.7-0ubuntu0.14.04.1","1.14.9-0ubuntu0.14.04.1","1.15.7-0ubuntu0.14.04.1","1.15.8-0ubuntu0.14.04.1","1.16.5-0ubuntu0.14.04.1","1.17.7-0ubuntu0.14.04.1","1.17.9-0ubuntu0.14.04.1","1.18.3-0ubuntu0.14.04.1","1.18.5-0ubuntu0.14.04.1","1.19.4-0ubuntu0.14.04.1","1.20.4-0ubuntu0.14.04.1"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"oxide-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.5-0ubuntu0.16.04.1"}]}],"versions":["1.9.5-0ubuntu1","1.10.3-0ubuntu0.15.10.1","1.10.3-0ubuntu0.15.10.2","1.11.3-0ubuntu3","1.11.4-0ubuntu1","1.11.5-0ubuntu1","1.12.5-0ubuntu1","1.12.6-0ubuntu1","1.12.7-0ubuntu1","1.13.6-0ubuntu1","1.14.7-0ubuntu1","1.14.9-0ubuntu0.16.04.1","1.15.7-0ubuntu0.16.04.1","1.15.8-0ubuntu0.16.04.1","1.16.5-0ubuntu0.16.04.1","1.17.7-0ubuntu0.16.04.1","1.17.9-0ubuntu0.16.04.1","1.18.3-0ubuntu0.16.04.1","1.18.5-0ubuntu0.16.04.1","1.19.4-0ubuntu0.16.04.1","1.20.4-0ubuntu0.16.04.1"],"bundled":11},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP2","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"57.0.2987.98-8.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP2","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"57.0.2987.98-8.1"}]}],"bundled":18}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"google","product":"chrome"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html","tags":["x_refsource_CONFIRM","x_transferred","web","article","report"]},{"url":"https://security.gentoo.org/glsa/201704-02","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://www.debian.org/security/2017/dsa-3810","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.securityfocus.com/bid/96767","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0499.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://crbug.com/691323","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5040","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-2gmm-8x35-3cmg"},{"url":"https://advisories.mageia.org/MGASA-2017-0111.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=20187","tags":["report"]},{"url":"https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2017/02/stable-channel-update-for-desktop.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_16.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0499","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431031","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431032","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431033","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431034","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431039","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431040","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431042","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431045","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431046","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431047","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431048","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0499.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5029","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5029","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5029","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5030","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5030","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5030","tags":["advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5031","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5031","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5031","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5032","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5032","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5032","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5033","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5033","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5033","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5034","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5034","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5034","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5035","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5035","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5035","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5036","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5036","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5036","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5037","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5037","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5037","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5038","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5038","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5038","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5039","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5039","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5039","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5040","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5040","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5041","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5041","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5041","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5042","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5042","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5042","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5043","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5043","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5043","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5044","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5044","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5044","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5045","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5045","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5045","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5046","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5046","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5046","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-5040","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3236-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-5029","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5030","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5031","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5033","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5035","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5037","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5041","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5044","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5045","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5046","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CGEJIAKNREDZSMA4I6FRAI6U2CLXZKIO/#CGEJIAKNREDZSMA4I6FRAI6U2CLXZKIO","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1028848","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5046","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2PWEOYPGN6NS2GPOOLH27ZPXQ7KSRFP4/#2PWEOYPGN6NS2GPOOLH27ZPXQ7KSRFP4","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2017-5040","description":"V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a crafted HTML page.","status":"published","published":"2017-04-24T23:00:00Z","modified":"2024-08-05T14:47:44.307Z","updated_at":"2026-11-02T14:33:12.942409Z"}],"euvd":[{"id":"EUVD-2017-14149","description":"V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a crafted HTML page.","status":"published","published":"2017-04-24T23:00:00Z","modified":"2024-08-05T14:47:44Z","updated_at":"2026-11-03T02:39:17.401968Z"}],"ghsa":[{"id":"GHSA-2gmm-8x35-3cmg","title":"V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for...","description":"V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a crafted HTML page.","status":"published","published":"2022-04-30T00:02:21Z","modified":"2023-01-30T05:04:23Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T14:47:02.242952Z"}],"nvd":[{"id":"CVE-2017-5040","description":"V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a crafted HTML page.","status":"published","published":"2017-04-24T23:59:00.533Z","modified":"2026-06-17T01:19:48.153Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:46.08744Z"}],"osv":[{"id":"RHSA-2017:0499","title":"Red Hat Security Advisory: chromium-browser security update","status":"published","published":"2024-09-13T11:59:00Z","modified":"2026-06-29T10:15:36Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"UBUNTU-CVE-2017-5040","description":"V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a crafted HTML page.","status":"published","published":"2017-03-10T00:00:00Z","modified":"2026-04-22T11:25:35.543016Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium"},{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:15.388065Z"},{"id":"DSA-3810-1","title":"chromium-browser - security update","status":"published","published":"2017-03-15T00:00:00Z","modified":"2026-03-09T01:20:23.520641Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0111","title":"Updated chromium-browser-stable packages fix security vulnerability","description":"Chromium-browser 57.0.2987.133 fixes security issues:\n\nMultiple flaws were found in the way Chromium 55 processes various types\nof web content, where loading a web page containing malicious content\ncould cause Chromium to crash, execute arbitrary code, or disclose\nsensitive information. (CVE-2017-5006, CVE-2017-5007, CVE-2017-5008,\nCVE-2017-5009, CVE-2017-5010, CVE-2017-5011, CVE-2017-5012,\nCVE-2017-5013, CVE-2017-5014, CVE-2017-5015, CVE-2017-5016,\nCVE-2017-5017, CVE-2017-5018, CVE-2017-5019, CVE-2017-5020,\nCVE-2017-5021, CVE-2017-5022, CVE-2017-5023, CVE-2017-5024,\nCVE-2017-5025, CVE-2017-5026, CVE-2017-5027, CVE-2017-5029,\nCVE-2017-5030, CVE-2017-5031, CVE-2017-5032, CVE-2017-5033,\nCVE-2017-5034, CVE-2017-5035, CVE-2017-5036, CVE-2017-5037,\nCVE-2017-5038, CVE-2017-5039, CVE-2017-5040, CVE-2017-5041,\nCVE-2017-5042, CVE-2017-5043, CVE-2017-5044, CVE-2017-5045,\nCVE-2017-5046, CVE-2017-5052, CVE-2017-5053, CVE-2017-5054,\nCVE-2017-5055, CVE-2017-5056)\n","status":"published","published":"2017-04-21T07:24:22Z","modified":"2026-04-16T06:23:01.92980446Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2017:0738-1","title":"Security update for Chromium","description":"Chromium was updated to 57.0.2987.98 to fix security issues and bugs.\n\nThe following vulnerabilities were fixed (bsc#1028848):\n\n- CVE-2017-5030: Memory corruption in V8\n- CVE-2017-5031: Use after free in ANGLE\n- CVE-2017-5032: Out of bounds write in PDFium\n- CVE-2017-5029: Integer overflow in libxslt\n- CVE-2017-5034: Use after free in PDFium\n- CVE-2017-5035: Incorrect security UI in Omnibox\n- CVE-2017-5036: Use after free in PDFium\n- CVE-2017-5037: Multiple out of bounds writes in ChunkDemuxer\n- CVE-2017-5039: Use after free in PDFium\n- CVE-2017-5040: Information disclosure in V8\n- CVE-2017-5041: Address spoofing in Omnibox\n- CVE-2017-5033: Bypass of Content Security Policy in Blink\n- CVE-2017-5042: Incorrect handling of cookies in Cast\n- CVE-2017-5038: Use after free in GuestView\n- CVE-2017-5043: Use after free in GuestView\n- CVE-2017-5044: Heap overflow in Skia\n- CVE-2017-5045: Information disclosure in XSS Auditor\n- CVE-2017-5046: Information disclosure in Blink\n\n   \nThe following non-security changes are included:\n\n- Address broken rendering on non-intel cards   \n","status":"published","published":"2017-03-17T20:07:47Z","modified":"2026-02-04T02:19:55.549705Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2017:0740-1","title":"Security update for Chromium","description":"Chromium was updated to 57.0.2987.98 to fix security issues and bugs.\n\nThe following vulnerabilities were fixed (bsc#1028848):\n\n- CVE-2017-5030: Memory corruption in V8\n- CVE-2017-5031: Use after free in ANGLE\n- CVE-2017-5032: Out of bounds write in PDFium\n- CVE-2017-5029: Integer overflow in libxslt\n- CVE-2017-5034: Use after free in PDFium\n- CVE-2017-5035: Incorrect security UI in Omnibox\n- CVE-2017-5036: Use after free in PDFium\n- CVE-2017-5037: Multiple out of bounds writes in ChunkDemuxer\n- CVE-2017-5039: Use after free in PDFium\n- CVE-2017-5040: Information disclosure in V8\n- CVE-2017-5041: Address spoofing in Omnibox\n- CVE-2017-5033: Bypass of Content Security Policy in Blink\n- CVE-2017-5042: Incorrect handling of cookies in Cast\n- CVE-2017-5038: Use after free in GuestView\n- CVE-2017-5043: Use after free in GuestView\n- CVE-2017-5044: Heap overflow in Skia\n- CVE-2017-5045: Information disclosure in XSS Auditor\n- CVE-2017-5046: Information disclosure in Blink\n\n   \nThe following non-security changes are included:\n\n- Address broken rendering on non-intel cards   \n","status":"published","published":"2017-03-17T20:07:47Z","modified":"2026-02-04T03:04:02.820878Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"USN-3236-1","title":"oxide-qt vulnerabilities","description":"Multiple vulnerabilities were discovered in Chromium. If a user were\ntricked in to opening a specially crafted website, an attacker could\npotentially exploit these to obtain sensitive information, spoof\napplication UI by causing the security status API or webview URL to\nindicate the wrong values, bypass security restrictions, cause a denial\nof service via application crash, or execute arbitrary code.\n(CVE-2017-5029, CVE-2017-5030, CVE-2017-5031, CVE-2017-5033,\nCVE-2017-5035, CVE-2017-5037, CVE-2017-5040, CVE-2017-5041, CVE-2017-5044,\nCVE-2017-5045, CVE-2017-5046)\n","status":"published","published":"2017-03-29T20:24:43Z","modified":"2026-04-22T09:33:48.916014Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}