Field Assessment
AI analysis pending.
CVE
CVE-2017-15387
Severity
HIGH
CVSS
8.8
EPSS
1.38%
Windows Chrome Java
Original Filing — NVD Description
Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to open javascript: URL windows when they should not be allowed to via a crafted HTML page.