CVE-2017-5022 in Chrome
Summary
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
01/02/2017
Disclosure
02/17/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 96047 | Google Chrome Blink Content Security Policy access control | 284 | Not defined | Official fix | CVE-2017-5022 |