CVE-2017-5006

MEDIUM · CVSS 6.1 EPSS 1.23%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-02-17 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2017-5006

Severity

MEDIUM

CVSS

6.1

EPSS

1.23%

Windows Linux Android Chrome

Original Filing — NVD Description

Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled object owner relationships, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.