CVE-2017-5007

CVE-2017-5007 describes a Universal Cross-Site Scripting (UXSS) vulnerability in Google Chrome versions prior to 56.0.2924.76 (Linux, Windows, Mac) and 56.0.2924.87 (Android). This flaw allowed a remote attacker to inject arbitrary scripts or HTML by crafting a malicious HTML page that exploited an incorrect event sequence during page closure. Rated Medium severity (CVSS 6.1), it requires user interaction (UI:R) but can be exploited over the network (AV:N) with low attack complexity (AC:L), potentially leading to limited confidentiality and integrity impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it garnered moderate community discussion and media coverage at the time of disclosure.