AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2017-5018

MEDIUM · CVSS 6.1 EPSS 1.12%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-02-17 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2017-5018
Severity
MEDIUM
CVSS
6.1
EPSS
1.12%
Windows Linux Android Chrome

Original Filing — NVD Description

Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, had an insufficiently strict content security policy on the Chrome app launcher page, which allowed a remote attacker to inject scripts or HTML into a privileged page via a crafted HTML page.