Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2017-5121

26
FAUCET Score

CVE-2017-5121 is a high-severity vulnerability in Google Chrome versions prior to 61.0.3163.100, affecting Linux, Windows, and Mac. It stems from an inappropriate use of JIT optimization in the V8 engine, specifically during the escape analysis phase. A remote attacker could exploit this by tricking a user into visiting a crafted HTML page, leading to arbitrary code execution within the browser's sandbox. The vulnerability has a CVSS score of 8.8, indicating high impact on confidentiality, integrity, and availability, with low attack complexity and no required privileges, but user interaction is necessary. While there's no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), it has garnered significant community discussion and media coverage, suggesting notable awareness within the security community.

Impacted Technologies

VendorProductVersion(s)CPE
< 61.0.3163.100CPE matchmatch criteria
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
9.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
10.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
6.0CPE matchmatch criteria
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
6.0CPE matchmatch criteria
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

8.8HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
2.8
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
5.29%
Probability of exploitation in next 30 days
EPSS Percentile
91.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0529 is in the 91st percentile among its peer group of 14,875 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6 SupplementaryFixed in: chromium-browser-0:61.0.3163.100-1.el6_9
View patch

Vendor Advisories (1)

redhatCVE-2017-5121Important

chromium-browser: out-of-bounds access in v8

Sep 21, 2017

References

access.redhat.com / errata/RHSA-2017:2792
blogs.technet.microsoft.com / mmpc/2017/10/18/browser-security-beyond-sandboxing
chromereleases.googleblog.com / 2017/09/stable-channel-update-for-desktop_21.html
crbug.com / 765433
security.gentoo.org / glsa/201709-25
debian.org / security/2017/dsa-3985
securityfocus.com / bid/100947
securitytracker.com / id/1039497