CVE-2017-15404

CVE-2017-15404 describes a local privilege escalation vulnerability in Google Chrome on Chrome OS, affecting versions prior to 61.0.3163.113. This flaw stemmed from inappropriate symlink handling and the ability to process crash dumps with root privileges, allowing a local attacker to elevate privileges via a crafted HTML page. With a CVSS score of 7.8 (High), this vulnerability has a low attack complexity and requires local access, but could lead to high impacts on confidentiality, integrity, and availability. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei, though it has received some community discussion and media coverage.