{"id":"CVE-2017-5030","published":"2017-04-24T23:59:00Z","modified":"2026-06-17T01:19:46Z","title":"Google Chromium V8 Memory Corruption Vulnerability","vendor":"Google","product":"Chromium V8","tier":"core","eol":null,"description":{"text":"Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.","provenance":"source","from":"NVD"},"summary":{"text":"The flaw is an incorrect handling of complex species in the V8 JavaScript engine of Google Chromium, which leads to memory corruption. An attacker with remote network access can execute arbitrary code by persuading a user to open a crafted HTML page, with no authentication required.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:10:29Z"},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.40635,"percentile":0.98647,"date":"2026-10-28","provenance":"source"},"kev":{"dateAdded":"2022-06-08","dueDate":"2022-06-22","ransomware":false,"requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-5030","provenance":"source"},"vulncheckKev":{"dateAdded":"2019-09-24","exploitedFirstSeen":"2019-09-24","ransomware":false,"evidence":[{"url":"https://citizenlab.ca/2019/09/poison-carp-tibetan-groups-targeted-with-1-click-mobile-exploits/","date":"2019-09-24"},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","date":"2022-06-08"},{"url":"https://www.trendmicro.com/en_us/research/24/l/earth-minotaur.html","date":"2024-12-05"}],"evidenceTotal":3,"provenance":"source"},"exploited":true,"otx":{"pulseCount":50,"pulses":[{"name":"Actively_Exploited_Kev | Oct 29, 2026","url":"https://otx.alienvault.com/pulse/6ae20c1db17e7057ae7d9ad1","created":"2026-10-28"},{"name":"Actively_Exploited_Kev | Oct 28, 2026","url":"https://otx.alienvault.com/pulse/6ae0ba7e0e2a97ff7b218819","created":"2026-10-27"},{"name":"Actively_Exploited_Kev | Oct 27, 2026","url":"https://otx.alienvault.com/pulse/6adf68b85c3e852f3c111d18","created":"2026-10-26"},{"name":"Actively_Exploited_Kev | Oct 24, 2026","url":"https://otx.alienvault.com/pulse/6adb740e397c3ad4799aa4cd","created":"2026-10-23"},{"name":"Actively_Exploited_Kev | Oct 23, 2026","url":"https://otx.alienvault.com/pulse/6ada236fcfba2dfa730ea482","created":"2026-10-22"},{"name":"Actively_Exploited_Kev | Oct 22, 2026","url":"https://otx.alienvault.com/pulse/6ad8d33a077cbb5cab524d80","created":"2026-10-21"},{"name":"Actively_Exploited_Kev | Oct 21, 2026","url":"https://otx.alienvault.com/pulse/6ad78130c4d1ac2be83a8b6d","created":"2026-10-20"},{"name":"Actively_Exploited_Kev | Oct 20, 2026","url":"https://otx.alienvault.com/pulse/6ad62f63c24a405a3423cc13","created":"2026-10-19"},{"name":"Actively_Exploited_Kev | Oct 19, 2026","url":"https://otx.alienvault.com/pulse/6ad4dda174e5797d0bd238b7","created":"2026-10-18"},{"name":"Actively_Exploited_Kev | Oct 18, 2026","url":"https://otx.alienvault.com/pulse/6ad38c22e1848f8189d1c121","created":"2026-10-17"}],"provenance":"machine"},"cwes":[{"id":"CWE-125","name":"Out-of-bounds Read"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2017-0499.html","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3810","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/96767","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html","tags":["Release Notes","Vendor Advisory"]},{"url":"https://crbug.com/682194","tags":["Exploit","Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201704-02","tags":["Third Party Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-20-126/","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0499.html","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3810","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/96767","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://chromereleases.googleblog.com/2017/03/stable-channel-update-for-desktop.html","tags":["Release Notes","Vendor Advisory"]},{"url":"https://crbug.com/682194","tags":["Exploit","Issue Tracking"]},{"url":"https://security.gentoo.org/glsa/201704-02","tags":["Third Party Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-20-126/","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-5030","tags":["US Government Resource"]}],"techniques":[{"id":"T1189","name":"Drive-by Compromise","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Malicious web page triggers browser exploitation","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"via a crafted HTML page","start":193,"end":216}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1203","name":"Exploitation for Client Execution","tactics":["execution"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Arbitrary code execution in browser process","mappingType":"primary_impact","evidence":[{"from":"description","quote":"allowed a remote attacker to execute arbitrary code","start":141,"end":192}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2017-14139","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-14139","exploited":true,"exploitedSince":"2022-06-08","provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":["https://crbug.com/682194"],"flow":[{"stage":"exploitation","techniques":["T1189"],"provenance":"ai"},{"stage":"primary","techniques":["T1203"],"provenance":"ai"}],"timeline":[{"date":"2017-04-24","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5030","provenance":"source"},{"date":"2019-09-24","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://citizenlab.ca/2019/09/poison-carp-tibetan-groups-targeted-with-1-click-mobile-exploits/","provenance":"source"},{"date":"2022-06-08","kind":"kev","label":"Added to CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","provenance":"source"},{"date":"2022-06-08","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-14139","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":1871},"priority":{"score":68.9,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in CISA KEV and VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 2592 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.73,"detail":"percentile 0.9865"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit"},{"name":"Mentioned in OTX pulses","points":3.0,"detail":"50 pulses"},{"name":"CVSS severity","points":6.16,"detail":"base score 8.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"familyId":"fam-class-google-chrome-cwe-125"}}