PT-2017-16321

CVE-2017-5121

·

Published

2017-09-21

·

Updated

2025-09-29

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 61.0.3163.100 Opera versions prior to 61.0.3163.100
Description The issue is related to the inappropriate use of JIT optimisation in V8, allowing a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This is related to the escape analysis phase.
Recommendations For Google Chrome versions prior to 61.0.3163.100, update to version 61.0.3163.100 or later. For Opera versions prior to 61.0.3163.100, update to version 61.0.3163.100 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
ALSA-2025_16880
ALT-PU-2017-2311
DSA-3985-1
MGASA-2017-0423
OPENSUSE-SU-2017:2557-1
OPENSUSE-SU-2017:2558-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
RHSA-2017:2792
RHSA-2017_2792
Found an issue in the description? Have something to add? Feel free to write us 👾