Google Chromium V8 Memory Corruption Vulnerability

HIGH 8.8EXPLOITED (CISA KEV)CVE-2017-5030 · Published 24/04/2017 · updated 17/06/2026

Google Chromium V8 Memory Corruption Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 08/06/2022. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
chrome google	`< 57.0.2987.108< 57.0.2987.98`	`57.0.2987.10857.0.2987.98`

Description

Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.

References

rhn.redhat.com/errata/RHSA-2017-0499.html · Third Party Advisory
debian.org/security/2017/dsa-3810 · Mailing List
securityfocus.com/bid/96767 · Broken Link
chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html · Release Notes
crbug.com/682194 · Exploit
security.gentoo.org/glsa/201704-02 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-20-126 · Third Party Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2017-5030

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free