Data Leakage Vulnerability in Google Chrome Affects Multiple Versions
CVE-2017-15417

5.3MEDIUM

Key Information:

Vendor
Google
Status
Google Chrome Prior To 63.0.3239.84 Unknown
Vendor
CVE Published:
28 August 2018

Summary

A vulnerability in the Skia graphics library's canvas composite operations in Google Chrome may allow remote attackers to exploit cross-origin data leakage through a specially crafted HTML page. This issue could lead to information exposure, potentially allowing unauthorized access to sensitive user data from other origins. Users are advised to update their browsers to the latest versions to mitigate this risk.

Affected Version(s)

Google Chrome prior to 63.0.3239.84 unknown Google Chrome prior to 63.0.3239.84 unknown

References

https://crbug.com/699028
x_refsource_MISC
https://access.redhat.com/errata/RHSA-2017:3401
vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201801-03
vendor-advisoryx_refsource_GENTOO

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.