CVE-2017-5071

CVE-2017-5071 describes an insufficient input validation vulnerability in Google Chrome's V8 JavaScript engine, affecting versions prior to 59.0.3071.86 on Linux, Windows, and Mac, and 59.0.3071.92 on Android. A remote attacker could exploit this by crafting a malicious HTML page, leading to an out-of-bounds memory read. This vulnerability has a CVSS score of 6.3 (Medium), indicating a network-based attack with low complexity, requiring user interaction, and potentially impacting confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage.