CVE-2017-5040

CVE-2017-5040 describes a memory disclosure vulnerability in Google Chrome's V8 JavaScript engine, affecting versions prior to 57.0.2987.98 on Mac, Windows, and Linux, and 57.0.2987.108 on Android. A missing neutering check allowed a remote attacker to read memory values by enticing a user to visit a specially crafted HTML page. This is a medium severity vulnerability with a CVSS score of 4.3, requiring user interaction and having a low impact on confidentiality. There is no evidence of active exploitation, and no public exploit code or Metasploit modules are available. While it received some media coverage and community discussion, its EPSS score is low, suggesting a limited likelihood of future exploitation.