chromium -- multiple vulnerabilitiesentered 2017-01-26
no CVE referenced
CVE details
CVE-2017-5018
Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, had an insufficiently strict content security policy on the Chrome app launcher page, which allowed a remote attacker to inject scripts or HTML into a privileged page via a crafted HTML page.
- Score
- 6.1 medium
- Published
- 2017-02-17
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.