CVE-2017-5033

Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP restrictions to local…

published April 24, 2017

CVSS
—
EPSS
1%
Percentile
73.8
In the wild
Unconfirmed
What it is

Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP restrictions to local scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page, related to the unsafe-inline keyword.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01491 · 73.8th percentile
Published
2017-04-24T23:00Z
EPSS history
Timeline
  • 24 APR 23:00Z
    Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP restrictions to local…
    cvelistv5