CVE-2017-5091

High

Published: 27/10/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A use after free in IndexedDB in Google Chrome prior to version 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

Risk Assessment

This vulnerability could lead to the exposure of sensitive user data or allow remote code execution, posing a significant threat to organizational security.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and to regularly monitor and update software to minimize risks.

Other vulnerabilities in Google Chrome IndexedDB

CVE-2015-1276Critical
A use-after-free vulnerability in the IndexedDB implementation in Google Chrome before version 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an abort action before a certain write operation.

Original NVD description (English source)

A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.