CVE-2017-15393

CVE-2017-15393 describes an Insufficient Policy Enforcement vulnerability in Google Chrome versions prior to 62.0.3202.62, specifically impacting its DevTools remote debugging functionality. A remote attacker could exploit this by crafting an HTML page to gain unauthorized access to remote debugging, effectively leading to a "Referer leak" and affecting Debian-based Chrome installations. This vulnerability carries a high CVSS score of 8.8, indicating a critical risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation in the wild (not in KEV) and no public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, suggesting awareness within the cybersecurity community.