CVE-2017-5053

CVE-2017-5053 is an out-of-bounds read vulnerability in the V8 JavaScript engine within Google Chrome, affecting versions prior to 57.0.2987.133 on Linux, Windows, and Mac, and 57.0.2987.132 on Android. This critical flaw, related to Array.prototype.indexOf, allows a remote attacker to execute arbitrary code within the browser's sandbox by enticing a user to visit a specially crafted HTML page. With a CVSS score of 9.6, it presents a high risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation in the wild or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered some community discussion and media coverage, indicating awareness of its potential severity.