CVE-2017-5109

CVE-2017-5109 describes an inappropriate implementation in Google Chrome's unload handler for permission prompts, affecting versions prior to 60.0.3112.78 on Linux, Windows, and Mac. This flaw allowed a remote attacker to display UI elements on a non-attacker-controlled tab through a specially crafted HTML page. With a CVSS score of 4.3 (Medium), it requires user interaction (UI:R) and has a low impact on integrity (I:L), meaning it could mislead users but not directly compromise data. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB are all negative), and community discussion and media coverage are minimal, indicating low current threat activity.