Skip to content
OpenAdvisories
Unscored CVE-2017-5028 EUVD-2017-14138GHSA-f55p-fgfp-vxmw

Insufficient data validation in V8 in Google Chrome prior to 56.0.2924.76 allowed a remote attacker to leak cross-origin data via a crafted…

Published Jun 27, 2019 · Updated Aug 5, 2024 · Assigned by Chrome

Vendor: Google Product: Chrome Category: Browsers

Description

Insufficient data validation in V8 in Google Chrome prior to 56.0.2924.76 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Affected products

VendorProductAffectedFixed
Google Chrome unspecified – < 56.0.2924.76 56.0.2924.76

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 8 chromium-browser 56.0.2924.76-1~deb8u1 DSA-3776-1

Advisories 1

References