CVE-2017-5081

2017-10-2705:00:00

Chrome

www.cve.org

AI Score

5.3

Confidence

Low

EPSS

Percentile

5.1%

JSON

Lack of verification of an extension’s locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.

CNA Affected

[
  {
    "product": "Google Chrome prior to 59.0.3071.86 for Mac, Windows and Linux, and 59.0.3071.92 for Android",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Google Chrome prior to 59.0.3071.86 for Mac, Windows and Linux, and 59.0.3071.92 for Android"
      }
    ]
  }
]