Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2017-5070 Details
Description
Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jan 29, 2025Exploitation: ActiveAutomatable: NoTechnical Impact: Total
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
This CVE is in CISA's Known Exploited Vulnerabilities Catalog
Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.
| Vulnerability Name | Date Added | Due Date | Required Action |
|---|---|---|---|
| Google Chromium V8 Type Confusion Vulnerability | Jun 8, 2022 | Jun 22, 2022 | Apply updates per vendor instructions. |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-843 | Access of Resource Using Incompatible Type ('Type Confusion') | [email protected] |
| CWE-843 | Access of Resource Using Incompatible Type ('Type Confusion') | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| google chrome | < 59.0.3071.86 < 59.0.3071.92 |
CPE
Remediation
| |
| apple macos | All versions |
CPE
Remediation
| |
| linux linux kernel | All versions |
CPE
Remediation
| |
| microsoft windows | All versions |
CPE
Remediation
| |
| google android | All versions |
CPE
Remediation
| |
| redhat enterprise linux desktop | 6.0 |
CPE
Remediation
| |
| redhat enterprise linux server | 6.0 |
CPE
Remediation
| |
| redhat enterprise linux workstation | 6.0 |
CPE
Remediation
| |
Change History
19 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 21, 2026 | Modified Analysis | [email protected] |
| Oct 22, 2025 | CVE Modified | CISA-ADP |
| Oct 21, 2025 | CVE Modified | CISA-ADP |
| Oct 21, 2025 | CVE Modified | CISA-ADP |
| Feb 20, 2025 | Modified Analysis | [email protected] |
| Jan 29, 2025 | CVE Modified | CISA-ADP |
| Jan 28, 2025 | Modified Analysis | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| Jun 28, 2024 | Modified Analysis | [email protected] |
| May 14, 2024 | CVE Modified | [email protected] |
| Nov 7, 2023 | CVE Source Update | [email protected] |
| Nov 7, 2023 | CVE Modified | [email protected] |
| Apr 6, 2022 | Modified Analysis | [email protected] |
| Sep 8, 2021 | CPE Deprecation Remap | [email protected] |
| Jan 5, 2018 | CVE Modified | [email protected] |
| Nov 13, 2017 | Initial Analysis | [email protected] |
| Oct 28, 2017 | CVE Modified | [email protected] |