CVE-2017-5070

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 59.0.3071.86 for Linux, Windows, and Mac Google Chrome version prior to 59.0.3071.92 for Android Opera versions prior to 59.0.3071.86

Description The issue is related to a type confusion in the V8 JavaScript engine, which can be exploited by a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This can be achieved by specially forming an HTML page.

Recommendations For Google Chrome versions prior to 59.0.3071.86 for Linux, Windows, and Mac, update to version 59.0.3071.86 or later. For Google Chrome version prior to 59.0.3071.92 for Android, update to version 59.0.3071.92 or later. For Opera versions prior to 59.0.3071.86, update to version 59.0.3071.86 or later. As a temporary workaround, consider restricting access to crafted HTML pages until a patch is available.