CVE-2017-5081: Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with…

Description

Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

None

Integrity

Low

Availability

None

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.3% · higher than 27% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

CH

Chrome · Google

before 59.0.3071.86; before 59.0.3071.92 · source: NVD

DL

Debian Linux · Debian

9.0 · source: NVD

EL

Enterprise Linux Desktop · Redhat

6.0 · source: NVD

EL

Enterprise Linux Server · Redhat

6.0 · source: NVD

EL

Enterprise Linux Workstation · Redhat

6.0 · source: NVD