PT-2017-16321
CVE-2017-5121
·
Published
2017-09-21
·
Updated
2025-09-29
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 61.0.3163.100
Opera versions prior to 61.0.3163.100
Description
The issue is related to the inappropriate use of JIT optimisation in V8, allowing a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This is related to the escape analysis phase.
Recommendations
For Google Chrome versions prior to 61.0.3163.100, update to version 61.0.3163.100 or later.
For Opera versions prior to 61.0.3163.100, update to version 61.0.3163.100 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾