CVE-2017-5027

CVE-2017-5027 describes a vulnerability in Google Chrome (prior to versions 56.0.2924.76 for desktop and 56.0.2924.87 for Android) where the Blink rendering engine failed to properly enforce the unsafe-inline Content Security Policy. This allowed a remote attacker to bypass security policies through a crafted HTML page, potentially leading to information disclosure (CVSS 4.3, Medium). While the attack requires user interaction (UI:R) and has low impact (I:L), there is no evidence of active exploitation, public exploit code, or significant community discussion beyond a single mention and article.