CVE-2017-5011

CVE-2017-5011 describes a vulnerability in Google Chrome versions prior to 56.0.2924.76 on Windows, where insufficient sanitization of DevTools URLs allowed a malicious extension to read local filesystem contents via a crafted HTML page. This medium-severity vulnerability (CVSS 6.5) requires user interaction to install a malicious extension and then visit a specially designed webpage. While there is no evidence of active exploitation, public exploit code, or inclusion in CISA's KEV catalog, the vulnerability garnered significant community discussion and media coverage at the time of its disclosure.