CVE-2017-5043

CVE-2017-5043 describes a use-after-free vulnerability in the GuestView component of Chrome Apps, affecting Google Chrome versions prior to 57.0.2987.98 on Linux, Windows, and Mac. A remote attacker could exploit this flaw via a crafted Chrome extension to achieve an out-of-bounds memory read. This vulnerability carries a high CVSS score of 8.8, indicating a critical risk with high impact on confidentiality, integrity, and availability, requiring user interaction for exploitation. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it garnered some community discussion and media coverage at the time of disclosure.