{"id":"CVE-2017-5042","aliases":["DSA-3810-1","EUVD-2017-14151","GHSA-9wr7-mfw6-pfpw","MGASA-2017-0111","RHSA-2017:0499","UBUNTU-CVE-2017-5042","openSUSE-SU-2017:0738-1","openSUSE-SU-2017:0740-1"],"status":"published","title":"Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for...","description":"Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent.","severity":{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00426,"percentile":0.37105,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-311"],"published":"2017-03-15T00:00:00Z","modified":"2026-06-29T10:15:36Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"chromium-browser","fixed_in":["58.0.3029.81-0ubuntu0.14.04.1172"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"chromium-browser","fixed_in":["57.0.2987.98-0ubuntu0.16.04.1276"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:8","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"57.0.2987.98-1~deb8u1"}]}],"versions":["41.0.2272.118-1","42.0.2311.135-1","42.0.2311.135-1~deb8u1","42.0.2311.135-2","42.0.2311.90-1","42.0.2311.90-1~deb8u1","42.0.2311.90-2","43.0.2357.124-1","43.0.2357.124-2","43.0.2357.124-3","43.0.2357.130-1","43.0.2357.65-1","43.0.2357.65-1~deb8u1","43.0.2357.81-1","44.0.2403.107-1","44.0.2403.107-2","44.0.2403.157-1","44.0.2403.89-1","44.0.2403.89-1~deb8u1","45.0.2454.101-1","45.0.2454.85-1","45.0.2454.85-1~deb8u1","46.0.2490.13-1","46.0.2490.71-1","46.0.2490.71-1~deb8u1","47.0.2526.111-1","47.0.2526.16-1","47.0.2526.73-1","47.0.2526.73-1~deb8u1","47.0.2526.80-1","47.0.2526.80-1~deb8u1","47.0.2526.80-2","47.0.2526.80-3","48.0.2564.116-1","48.0.2564.116-1~deb8u1","48.0.2564.23-1","48.0.2564.82-1","48.0.2564.82-1~deb8u1","48.0.2564.82-2","49.0.2623.108-1","49.0.2623.108-1~deb8u1","49.0.2623.108-2","49.0.2623.75-1","49.0.2623.75-1~deb8u1","49.0.2623.75-2","49.0.2623.87-1","49.0.2623.87-1~deb8u1","50.0.2661.75-1","50.0.2661.75-1~deb8u1","50.0.2661.75-2","50.0.2661.94-1","50.0.2661.94-1~deb8u1","51.0.2704.63-1","51.0.2704.63-1~deb8u1","51.0.2704.63-2","51.0.2704.79-1","51.0.2704.79-1~deb8u1","52.0.2743.116-1","52.0.2743.116-1~deb8u1","52.0.2743.116-2","52.0.2743.82-1","52.0.2743.82-1~deb8u1","52.0.2743.82-2","52.0.2743.82-3","52.0.2743.82-4","53.0.2785.113-1","53.0.2785.113-1~deb8u1","53.0.2785.143-1","53.0.2785.143-1+exp1","53.0.2785.143-1~deb8u1","53.0.2785.89-1","53.0.2785.89-1~deb8u1","53.0.2785.92-1","53.0.2785.92-2","53.0.2785.92-3","54.0.2840.101-1","55.0.2883.75-1","55.0.2883.75-1~deb8u1","55.0.2883.75-2","55.0.2883.75-2+exp1","55.0.2883.75-2+exp2","55.0.2883.75-2+exp3","55.0.2883.75-3","55.0.2883.75-4","55.0.2883.75-5","55.0.2883.75-6","56.0.2924.76-1","56.0.2924.76-1~deb8u1","56.0.2924.76-2","56.0.2924.76-3","56.0.2924.76-4","56.0.2924.76-5"],"bundled":18},{"source":"osv","ecosystem":"Mageia:5","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"57.0.2987.133-1.mga5"}]}],"bundled":45},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:57.0.2987.98-1.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"chromium-browser-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:57.0.2987.98-1.el6"}]}],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"58.0.3029.81-0ubuntu0.14.04.1172"}]}],"versions":["29.0.1547.65-0ubuntu2","31.0.1650.63-0ubuntu1~20131204.1","32.0.1700.107-0ubuntu1~20140204.977.1","33.0.1750.152-0ubuntu1~pkg995.1","34.0.1847.116-0ubuntu2","36.0.1985.125-0ubuntu1.14.04.0~pkg1029","37.0.2062.94-0ubuntu0.14.04.1~pkg1042","37.0.2062.120-0ubuntu0.14.04.1~pkg1049","38.0.2125.111-0ubuntu0.14.04.1.1061","39.0.2171.65-0ubuntu0.14.04.1.1064","40.0.2214.94-0ubuntu0.14.04.1.1068","40.0.2214.111-0ubuntu0.14.04.1.1069","41.0.2272.76-0ubuntu0.14.04.1.1076","43.0.2357.81-0ubuntu0.14.04.1.1089","43.0.2357.130-0ubuntu0.14.04.1.1092","44.0.2403.89-0ubuntu0.14.04.1.1095","45.0.2454.85-0ubuntu0.14.04.1.1097","45.0.2454.101-0ubuntu0.14.04.1.1099","47.0.2526.73-0ubuntu0.14.04.1.1106","47.0.2526.106-0ubuntu0.14.04.1.1107","48.0.2564.82-0ubuntu0.14.04.1.1108","48.0.2564.116-0ubuntu0.14.04.1.1111","49.0.2623.87-0ubuntu0.14.04.1.1112","49.0.2623.108-0ubuntu0.14.04.1.1113","50.0.2661.102-0ubuntu0.14.04.1.1117","51.0.2704.79-0ubuntu0.14.04.1.1121","52.0.2743.116-0ubuntu0.14.04.1.1134","53.0.2785.143-0ubuntu0.14.04.1.1142","53.0.2785.143-0ubuntu0.14.04.1.1145"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"57.0.2987.98-0ubuntu0.16.04.1276"}]}],"versions":["45.0.2454.101-0ubuntu1.1201","47.0.2526.73-0ubuntu1.1218","47.0.2526.106-0ubuntu1.1221","48.0.2564.82-0ubuntu1.1222","48.0.2564.116-0ubuntu1.1229","49.0.2623.87-0ubuntu1.1232","49.0.2623.108-0ubuntu1.1233","50.0.2661.102-0ubuntu0.16.04.1.1237","51.0.2704.79-0ubuntu0.16.04.1.1242","52.0.2743.116-0ubuntu0.16.04.1.1250","53.0.2785.143-0ubuntu0.16.04.1.1254","53.0.2785.143-0ubuntu0.16.04.1.1257","55.0.2883.87-0ubuntu0.16.04.1263","56.0.2924.76-0ubuntu0.16.04.1268"]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP2","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"57.0.2987.98-8.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP2","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"57.0.2987.98-8.1"}]}],"bundled":18}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"google","product":"chrome"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html","tags":["x_refsource_CONFIRM","x_transferred","web","article","report"]},{"url":"https://security.gentoo.org/glsa/201704-02","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"https://crbug.com/671932","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.debian.org/security/2017/dsa-3810","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.securityfocus.com/bid/96767","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0499.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5042","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-9wr7-mfw6-pfpw"},{"url":"https://advisories.mageia.org/MGASA-2017-0111.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=20187","tags":["report"]},{"url":"https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2017/02/stable-channel-update-for-desktop.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_16.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop_29.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0499","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431031","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431032","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431033","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431034","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431039","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431040","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431042","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431045","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431046","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431047","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1431048","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0499.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5029","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5029","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5029","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5030","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5030","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5030","tags":["advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5031","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5031","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5031","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5032","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5032","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5032","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5033","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5033","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5033","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5034","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5034","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5034","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5035","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5035","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5035","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5036","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5036","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5036","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5037","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5037","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5037","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5038","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5038","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5038","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5039","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5039","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5039","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5040","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5040","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5040","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5041","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5041","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5041","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5042","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5042","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5043","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5043","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5043","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5044","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5044","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5044","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5045","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5045","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5045","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5046","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5046","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5046","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-5042","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CGEJIAKNREDZSMA4I6FRAI6U2CLXZKIO/#CGEJIAKNREDZSMA4I6FRAI6U2CLXZKIO","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1028848","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5033","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5034","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5036","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5038","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5039","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5043","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5045","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5046","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2PWEOYPGN6NS2GPOOLH27ZPXQ7KSRFP4/#2PWEOYPGN6NS2GPOOLH27ZPXQ7KSRFP4","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2017-5042","description":"Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent.","status":"published","published":"2017-04-24T23:00:00Z","modified":"2024-08-05T14:47:44.398Z","updated_at":"2026-11-02T14:33:12.267141Z"}],"euvd":[{"id":"EUVD-2017-14151","description":"Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent.","status":"published","published":"2017-04-24T23:00:00Z","modified":"2024-08-05T14:47:44Z","updated_at":"2026-11-03T02:39:17.401968Z"}],"ghsa":[{"id":"GHSA-9wr7-mfw6-pfpw","title":"Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for...","description":"Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent.","status":"published","published":"2022-04-30T00:02:20Z","modified":"2023-01-30T05:04:00Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-311"],"updated_at":"2026-11-02T14:46:57.494982Z"}],"nvd":[{"id":"CVE-2017-5042","description":"Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent.","status":"published","published":"2017-04-24T23:59:00.597Z","modified":"2026-06-17T01:19:48.407Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.3,"vector":"AV:A/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-311"],"updated_at":"2026-11-02T14:03:46.08744Z"}],"osv":[{"id":"RHSA-2017:0499","title":"Red Hat Security Advisory: chromium-browser security update","status":"published","published":"2024-09-13T11:59:00Z","modified":"2026-06-29T10:15:36Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"UBUNTU-CVE-2017-5042","description":"Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent.","status":"published","published":"2017-04-24T23:59:00Z","modified":"2025-09-08T16:44:05Z","cvss":[{"version":"3.1","score":5.7,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.0","score":5.7,"vector":"CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:15.388065Z"},{"id":"DSA-3810-1","title":"chromium-browser - security update","status":"published","published":"2017-03-15T00:00:00Z","modified":"2026-03-09T01:20:23.520641Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0111","title":"Updated chromium-browser-stable packages fix security vulnerability","description":"Chromium-browser 57.0.2987.133 fixes security issues:\n\nMultiple flaws were found in the way Chromium 55 processes various types\nof web content, where loading a web page containing malicious content\ncould cause Chromium to crash, execute arbitrary code, or disclose\nsensitive information. (CVE-2017-5006, CVE-2017-5007, CVE-2017-5008,\nCVE-2017-5009, CVE-2017-5010, CVE-2017-5011, CVE-2017-5012,\nCVE-2017-5013, CVE-2017-5014, CVE-2017-5015, CVE-2017-5016,\nCVE-2017-5017, CVE-2017-5018, CVE-2017-5019, CVE-2017-5020,\nCVE-2017-5021, CVE-2017-5022, CVE-2017-5023, CVE-2017-5024,\nCVE-2017-5025, CVE-2017-5026, CVE-2017-5027, CVE-2017-5029,\nCVE-2017-5030, CVE-2017-5031, CVE-2017-5032, CVE-2017-5033,\nCVE-2017-5034, CVE-2017-5035, CVE-2017-5036, CVE-2017-5037,\nCVE-2017-5038, CVE-2017-5039, CVE-2017-5040, CVE-2017-5041,\nCVE-2017-5042, CVE-2017-5043, CVE-2017-5044, CVE-2017-5045,\nCVE-2017-5046, CVE-2017-5052, CVE-2017-5053, CVE-2017-5054,\nCVE-2017-5055, CVE-2017-5056)\n","status":"published","published":"2017-04-21T07:24:22Z","modified":"2026-04-16T06:23:01.92980446Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2017:0738-1","title":"Security update for Chromium","description":"Chromium was updated to 57.0.2987.98 to fix security issues and bugs.\n\nThe following vulnerabilities were fixed (bsc#1028848):\n\n- CVE-2017-5030: Memory corruption in V8\n- CVE-2017-5031: Use after free in ANGLE\n- CVE-2017-5032: Out of bounds write in PDFium\n- CVE-2017-5029: Integer overflow in libxslt\n- CVE-2017-5034: Use after free in PDFium\n- CVE-2017-5035: Incorrect security UI in Omnibox\n- CVE-2017-5036: Use after free in PDFium\n- CVE-2017-5037: Multiple out of bounds writes in ChunkDemuxer\n- CVE-2017-5039: Use after free in PDFium\n- CVE-2017-5040: Information disclosure in V8\n- CVE-2017-5041: Address spoofing in Omnibox\n- CVE-2017-5033: Bypass of Content Security Policy in Blink\n- CVE-2017-5042: Incorrect handling of cookies in Cast\n- CVE-2017-5038: Use after free in GuestView\n- CVE-2017-5043: Use after free in GuestView\n- CVE-2017-5044: Heap overflow in Skia\n- CVE-2017-5045: Information disclosure in XSS Auditor\n- CVE-2017-5046: Information disclosure in Blink\n\n   \nThe following non-security changes are included:\n\n- Address broken rendering on non-intel cards   \n","status":"published","published":"2017-03-17T20:07:47Z","modified":"2026-02-04T02:19:55.549705Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2017:0740-1","title":"Security update for Chromium","description":"Chromium was updated to 57.0.2987.98 to fix security issues and bugs.\n\nThe following vulnerabilities were fixed (bsc#1028848):\n\n- CVE-2017-5030: Memory corruption in V8\n- CVE-2017-5031: Use after free in ANGLE\n- CVE-2017-5032: Out of bounds write in PDFium\n- CVE-2017-5029: Integer overflow in libxslt\n- CVE-2017-5034: Use after free in PDFium\n- CVE-2017-5035: Incorrect security UI in Omnibox\n- CVE-2017-5036: Use after free in PDFium\n- CVE-2017-5037: Multiple out of bounds writes in ChunkDemuxer\n- CVE-2017-5039: Use after free in PDFium\n- CVE-2017-5040: Information disclosure in V8\n- CVE-2017-5041: Address spoofing in Omnibox\n- CVE-2017-5033: Bypass of Content Security Policy in Blink\n- CVE-2017-5042: Incorrect handling of cookies in Cast\n- CVE-2017-5038: Use after free in GuestView\n- CVE-2017-5043: Use after free in GuestView\n- CVE-2017-5044: Heap overflow in Skia\n- CVE-2017-5045: Information disclosure in XSS Auditor\n- CVE-2017-5046: Information disclosure in Blink\n\n   \nThe following non-security changes are included:\n\n- Address broken rendering on non-intel cards   \n","status":"published","published":"2017-03-17T20:07:47Z","modified":"2026-02-04T03:04:02.820878Z","updated_at":"2026-11-02T16:58:30.39372Z"}]}}