CVE-2017-5038

CVE-2017-5038 is a use-after-free vulnerability in the GuestView component of Chrome Apps, affecting Google Chrome prior to version 57.0.2987.98 on Linux, Windows, and Mac. A remote attacker could exploit this flaw via a crafted Chrome extension to perform an out-of-bounds memory read. This vulnerability has a CVSS score of 6.3 (Medium), indicating a low impact on confidentiality, integrity, and availability, requiring user interaction for exploitation. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion, though it received limited media coverage at the time of its disclosure.