rainbutterfly/cve_corpus huggingface dataset:
CVE-2017-5015 
Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled Unicode glyphs, which allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
Problem types: description: insufficient policy enforcement
Affected products: vendor: n/a
product: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android
Published: 2017-02-17T07:45:00.000Z
CVE-2017-5016 
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to prevent certain UI elements from being displayed by non-visible pages, which allowed a remote attacker to show certain UI elements on a page they don't control via a crafted HTML page.
Problem types: description: insufficient policy enforcement
Affected products: vendor: n/a
product: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android
Published: 2017-02-17T07:45:00.000Z
CVE-2017-5017 
Interactions with the OS in Google Chrome prior to 56.0.2924.76 for Mac insufficiently cleared video memory, which allowed a remote attacker to possibly extract image fragments on systems with GeForce 8600M graphics chips via a crafted HTML page.
Problem types: description: information disclosure
Affected products: vendor: n/a
product: Google Chrome prior to 56.0.2924.76 for Mac
Published: 2017-02-17T07:45:00.000Z
CVE-2017-5018 
Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, had an insufficiently strict content security policy on the Chrome app launcher page, which allowed a remote attacker to inject scripts or HTML into a privileged page via a crafted HTML page.
Problem types: description: insufficient policy enforcement
Affected products: vendor: n/a
product: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android
Published: 2017-02-17T07:45:00.000Z
CVE-2017-5019 
A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: use after free
Affected products: vendor: n/a
product: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android
Published: 2017-02-17T07:45:00.000Z
CVE-2017-5020 
Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to require a user gesture for powerful download operations, which allowed a remote attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted HTML page.
Problem types: description: insufficient policy enforcement
Affected products: vendor: n/a
product: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android
Published: 2017-02-17T07:45:00.000Z
CVE-2017-5021 
A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
Problem types: description: use after free
Affected products: vendor: n/a
product: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android
Published: 2017-02-17T07:45:00.000Z
CVE-2017-5022 
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page.
Problem types: description: insufficient policy enforcement
Affected products: vendor: n/a
product: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android
Published: 2017-02-17T07:45:00.000Z
CVE-2017-5023 
Type confusion in Histogram in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit a near null dereference via a crafted HTML page.
Problem types: description: type confusion
Affected products: vendor: n/a
product: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android
Published: 2017-02-17T07:45:00.000Z
CVE-2017-5024 
FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
Problem types: description: heap corruption
Affected products: vendor: n/a
product: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac
Published: 2017-02-17T07:45:00.000Z
CVE-2017-5025 
FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
Problem types: description: heap corruption
Affected products: vendor: n/a
product: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac
Published: 2017-02-17T07:45:00.000Z
CVE-2017-5026 
Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to prevent alerts from being displayed by swapped out frames, which allowed a remote attacker to show alerts on a page they don't control via a crafted HTML page.
Problem types: description: insufficient policy enforcement
Affected products: vendor: n/a
product: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac
Published: 2017-02-17T07:45:00.000Z
CVE-2017-5027 
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page.
Problem types: description: insufficient policy enforcement
Affected products: vendor: n/a
product: Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android
Published: 2017-02-17T07:45:00.000Z
CVE-2017-5028 
Insufficient data validation in V8 in Google Chrome prior to 56.0.2924.76 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Problem types: description: Insufficient data validation
Affected products: vendor: Google
product: Chrome
Published: 2019-06-27T16:13:41.000Z
CVE-2017-5029 
The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
Problem types: description: integer overflow
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android
Published: 2017-04-24T23:00:00.000Z
CVE-2017-5030 
Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.
Problem types: description: heap buffer overflow
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.98 for Linux, Windows and Mac, and 57.0.2987.108 for Android
Published: 2017-04-24T23:00:00.000Z
CVE-2017-5031 
A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
Problem types: description: Use after free in ANGLE
Affected products: vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
Published: 2017-04-24T23:00:00.000Z
CVE-2017-5032 
PDFium in Google Chrome prior to 57.0.2987.98 for Windows could be made to increment off the end of a buffer, which allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
Problem types: description: heap buffer overflow
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.98 for Windows
Published: 2017-04-24T23:00:00.000Z
CVE-2017-5033 
Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP restrictions to local scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page, related to the unsafe-inline keyword.
Problem types: description: insufficient policy enforcement
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android
Published: 2017-04-24T23:00:00.000Z
CVE-2017-5034 
A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.
Problem types: description: use after free
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.98 for Linux and Windows
Published: 2017-04-24T23:00:00.000Z
CVE-2017-5035 
Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information for a site.
Problem types: description: incorrect security UI
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.98 for Windows and Mac
Published: 2017-04-24T23:00:00.000Z
CVE-2017-5036 
A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to have an unspecified impact via a crafted PDF file.
Problem types: description: use after free
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android
Published: 2017-04-24T23:00:00.000Z
CVE-2017-5037 
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
Problem types: description: integer overflow
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android
Published: 2017-04-24T23:00:00.000Z
CVE-2017-5038 
Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a crafted Chrome extension.
Problem types: description: use after free
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.98 for Linux, Windows and Mac
Published: 2017-04-24T23:00:00.000Z
CVE-2017-5039 
A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
Problem types: description: use after free
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android
Published: 2017-04-24T23:00:00.000Z
CVE-2017-5040 
V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a crafted HTML page.
Problem types: description: information disclosure
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android
Published: 2017-04-24T23:00:00.000Z
CVE-2017-5041 
Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page.
Problem types: description: incorrect security UI
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.100
Published: 2017-04-24T23:00:00.000Z
CVE-2017-5042 
Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent.
Problem types: description: insufficient policy enforcement
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android
Published: 2017-04-24T23:00:00.000Z
CVE-2017-5043 
Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a crafted Chrome extension.
Problem types: description: use after free
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.98 for Linux, Windows and Mac
Published: 2017-04-24T23:00:00.000Z
CVE-2017-5044 
Heap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
Problem types: description: heap buffer overflow
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android
Published: 2017-04-24T23:00:00.000Z
CVE-2017-5045 
XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed detection of a blocked iframe load, which allowed a remote attacker to brute force JavaScript variables via a crafted HTML page.
Problem types: description: information disclosure
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android
Published: 2017-04-24T23:00:00.000Z
CVE-2017-5046 
V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient policy enforcement, which allowed a remote attacker to spoof the location object via a crafted HTML page, related to Blink information disclosure.
Problem types: description: insufficient policy enforcement
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android
Published: 2017-04-24T23:00:00.000Z
CVE-2017-5047 
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
Problem types: description: integer overflow
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android
Published: 2017-04-25T03:23:00.000Z
CVE-2017-5048 
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
Problem types: description: integer overflow
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android
Published: 2017-04-25T03:23:00.000Z
CVE-2017-5049 
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
Problem types: description: integer overflow
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android
Published: 2017-04-25T03:23:00.000Z
CVE-2017-5050 
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
Problem types: description: integer overflow
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android
Published: 2017-04-25T03:23:00.000Z
CVE-2017-5051 
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
Problem types: description: integer overflow
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android
Published: 2017-04-25T03:23:00.000Z
CVE-2017-5052 
An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.132 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page that triggers improper casting.
Problem types: description: Inappropriate implementation
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.133 for Mac, Windows and Linux, and 57.0.2987.132 for Android
Published: 2017-10-27T05:00:00.000Z
CVE-2017-5053 
An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to Array.prototype.indexOf.
Problem types: description: Out-of-bounds Read
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.133 for Linux, Windows and Mac, and 57.0.2987.132 for Android
Published: 2017-10-27T05:00:00.000Z
CVE-2017-5054 
An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to obtain heap memory contents via a crafted HTML page.
Problem types: description: Out-of-bounds Read
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.133 for Linux, Windows and Mac, and 57.0.2987.132 for Android
Published: 2017-10-27T05:00:00.000Z
CVE-2017-5055 
A use after free in printing in Google Chrome prior to 57.0.2987.133 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
Problem types: description: Use After Free
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.133 for Linux and Windows
Published: 2017-10-27T05:00:00.000Z
CVE-2017-5056 
A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
Problem types: description: Use After Free
Affected products: vendor: n/a
product: Google Chrome prior to 57.0.2987.133 for Linux, Windows and Mac, and 57.0.2987.132 for Android
Published: 2017-10-27T05:00:00.000Z
CVE-2017-5057 
Type confusion in PDFium in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.
Problem types: description: Type Confusion
Affected products: vendor: n/a
product: Google Chrome prior to 58.0.3029.81 for Mac, Windows and Linux, and 58.0.3029.83 for Android
Published: 2017-10-27T05:00:00.000Z
CVE-2017-5058 
A use after free in PrintPreview in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
Problem types: description: Use After Free
Affected products: vendor: n/a
product: Google Chrome prior to 58.0.3029.81 for Windows
Published: 2017-10-27T05:00:00.000Z
CVE-2017-5059 
Type confusion in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to potentially obtain code execution via a crafted HTML page.
Problem types: description: Type Confusion
Affected products: vendor: n/a
product: Google Chrome prior to 58.0.3029.81 for Linux, Windows and Mac, and 58.0.3029.83 for Android
Published: 2017-10-27T05:00:00.000Z
CVE-2017-5060 
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
Problem types: description: Insufficient Policy Enforcement
Affected products: vendor: n/a
product: Google Chrome prior to 58.0.3029.81 for Mac, Windows and Linux, and 58.0.3029.83 for Android
Published: 2017-10-27T05:00:00.000Z
CVE-2017-5061 
A race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
Problem types: description: Race
Affected products: vendor: n/a
product: Google Chrome prior to 58.0.3029.81 for Linux, Windows and Mac
Published: 2017-10-27T05:00:00.000Z
CVE-2017-5062 
A use after free in Chrome Apps in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to potentially perform out of bounds memory access via a crafted Chrome extension.
Problem types: description: Use After Free
Affected products: vendor: n/a
product: Google Chrome prior to 58.0.3029.81 for Mac, Windows and Linux, and 58.0.3029.83 for Android
Published: 2017-10-27T05:00:00.000Z
CVE-2017-5063 
A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
Problem types: description: Out-of-bounds Read
Affected products: vendor: n/a
product: Google Chrome prior to 58.0.3029.81 for Linux, Windows and Mac, and 58.0.3029.83 for Android
Published: 2017-10-27T05:00:00.000Z
CVE-2017-5064 
Incorrect handling of DOM changes in Blink in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Object Corruption
Affected products: vendor: n/a
product: Google Chrome prior to 58.0.3029.81 for Windows
Published: 2017-10-27T05:00:00.000Z
CVE-2017-5065 
Lack of an appropriate action on page navigation in Blink in Google Chrome prior to 58.0.3029.81 for Windows and Mac allowed a remote attacker to potentially confuse a user into making an incorrect security decision via a crafted HTML page.
Problem types: description: Inappropriate implementation
Affected products: vendor: n/a
product: Google Chrome prior to 58.0.3029.81 for Windows and Mac
Published: 2017-10-27T05:00:00.000Z
CVE-2017-5066 
Insufficient consistency checks in signature handling in the networking stack in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to incorrectly accept a badly formed X.509 certificate via a crafted HTML page.
Problem types: description: Inappropriate implementation
Affected products: vendor: n/a
product: Google Chrome prior to 58.0.3029.81 for Mac, Windows and Linux, and 58.0.3029.83 for Android
Published: 2017-10-27T05:00:00.000Z
CVE-2017-5067 
An insufficient watchdog timer in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
Problem types: description: Inappropriate implementation
Affected products: vendor: n/a
product: Google Chrome prior to 58.0.3029.81 for Linux, Windows and Mac
Published: 2017-10-27T05:00:00.000Z
CVE-2017-5068 
Incorrect handling of picture ID in WebRTC in Google Chrome prior to 58.0.3029.96 for Mac, Windows, and Linux allowed a remote attacker to trigger a race condition via a crafted HTML page.
Problem types: description: Race
Affected products: vendor: n/a
product: Google Chrome prior to 58.0.3029.96 for Mac, Windows and Linux
Published: 2017-10-27T05:00:00.000Z