CVE-2017-5091

CVE-2017-5091 describes a use-after-free vulnerability in IndexedDB within Google Chrome versions prior to 60.0.3112.78, affecting Linux, Android, Windows, and Mac. This flaw allowed a remote attacker to achieve an out-of-bounds memory read through a specially crafted HTML page. With a CVSS score of 8.8 (HIGH), it presents a significant risk due to its network-based attack vector, low complexity, and high potential for confidentiality, integrity, and availability impacts. Despite its severity, there is no evidence of active exploitation, nor are public exploit tools like Metasploit or Nuclei available, though it garnered moderate community discussion and media coverage at the time.