Content Security Policy Flaw in Google Chrome for Multiple Platforms
CVE-2017-5018
Key Information:
- Vendor
Google
- Vendor
- CVE Published:
- 17 February 2017
What is CVE-2017-5018?
A weakness in the content security policy of Google Chrome versions prior to 56.0.2924.76 for Linux, Windows, and Mac, as well as version 56.0.2924.87 for Android, allows a remote attacker to exploit this vulnerability. By crafting a malicious HTML page, an attacker can inject unwanted scripts or HTML into a privileged page, posing risks of unauthorized data access and execution of harmful scripts.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved