CVE-2017-5030

HighCVSS 8.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	Google Chrome prior to 57.0.2987.98 for Linux, Windows and Mac, and 57.0.2987.108 for Android	Google Chrome prior to 57.0.2987.98 for Linux, Windows and Mac, and 57.0.2987.108 for Android

References

http://rhn.redhat.com/errata/RHSA-2017-0499.htmlThird Party Advisory
http://www.debian.org/security/2017/dsa-3810Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/96767Broken Link, Third Party Advisory, VDB Entry
https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.htmlRelease Notes, Vendor Advisory
https://crbug.com/682194Exploit, Issue Tracking
https://security.gentoo.org/glsa/201704-02Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-20-126/Third Party Advisory, VDB Entry
http://rhn.redhat.com/errata/RHSA-2017-0499.htmlThird Party Advisory
http://www.debian.org/security/2017/dsa-3810Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/96767Broken Link, Third Party Advisory, VDB Entry
https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.htmlRelease Notes, Vendor Advisory
https://crbug.com/682194Exploit, Issue Tracking
https://security.gentoo.org/glsa/201704-02Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-20-126/Third Party Advisory, VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-5030US Government Resource

Timeline

Published: Apr 24, 2017
Last modified: Jun 17, 2026
Added to CISA KEV: Jun 8, 2022
NVD status: Analyzed

Related CVEs from 2017