CVE-2017-5096

🗓️ 27 Oct 2017 05:00:00Reported by ChromeType

Insufficient policy enforcement in Google Chrome for Android pre-60.0.3112.78 allowed remote attackers to perform cross-origin content download via crafted HTML page (CVE-2017-5096)

Reporter	Title	Published	Views	Family All 44
FreeBSD	chromium -- multiple vulnerabilities	25 Jul 201700:00	–	freebsd
CNVD	Google Chrome Cross-Origin Content Download Vulnerability	30 Oct 201700:00	–	cnvd
Cvelist	CVE-2017-5096	27 Oct 201705:00	–	cvelist
Debian CVE	CVE-2017-5096	27 Oct 201705:00	–	debiancve
EUVD	EUVD-2017-14205	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 26 Update: chromium-60.0.3112.90-1.fc26	19 Aug 201717:52	–	fedora
Fedora	[SECURITY] Fedora 25 Update: chromium-60.0.3112.113-1.fc25	10 Sep 201704:53	–	fedora
Tenable Nessus	Fedora 25 : chromium (2017-c708c044e3)	11 Sep 201700:00	–	nessus
Tenable Nessus	Fedora 26 : chromium (2017-f79ae2b96f)	21 Aug 201700:00	–	nessus
Tenable Nessus	FreeBSD : chromium -- multiple vulnerabilities (7d138476-7710-11e7-88a1-e8e0b747a45a)	2 Aug 201700:00	–	nessus

NVD

Node

google chromeRange<60.0.3112.78

AND

google androidMatch-

[
  {
    "product": "Google Chrome prior to 60.0.3112.78 for Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Google Chrome prior to 60.0.3112.78 for Android"
      }
    ]
  }
]

Source	Link
access	www.access.redhat.com/errata/RHSA-2017:1833
crbug	www.crbug.com/714442
chromereleases	www.chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html
securityfocus	www.securityfocus.com/bid/99950
security	www.security.gentoo.org/glsa/201709-15

13 May 2026 00:24Current

4.9Medium risk

Vulners AI Score4.9

CVSS 34.3

CVSS 24.3

EPSS0.00403

CWE-200