Google Chromium V8 Type Confusion Vulnerability

HIGH 8.8EXPLOITED (CISA KEV)CVE-2017-5070 · Published 27/10/2017 · updated 17/06/2026

Google Chromium V8 Type Confusion Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 08/06/2022. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
chrome google	`< 59.0.3071.86< 59.0.3071.92`	`59.0.3071.8659.0.3071.92`

Description

Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

References

securityfocus.com/bid/98861 · Broken Link
securitytracker.com/id/1038622 · Broken Link
access.redhat.com/errata/RHSA-2017:1399 · Third Party Advisory
chromereleases.googleblog.com/2017/06/stable-channel-update-for-desktop.html · Release Notes
crbug.com/722756 · Exploit
security.gentoo.org/glsa/201706-20 · Third Party Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2017-5070

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free