CVE-2017-5066: Google Chrome

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Insufficient consistency checks in signature handling in the networking stack in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to incorrectly accept a badly formed X.509 certificate via a crafted HTML page.

Affected products

• Google Chrome: before 58.0.3029.81 (fixed in 58.0.3029.81); before 58.0.3029.83 (fixed in 58.0.3029.83)
• Red Hat Enterprise Linux Desktop: version 6.0 only
• Red Hat Enterprise Linux Server: version 6.0 only
• Red Hat Enterprise Linux Workstation: version 6.0 only

Published 2017-10-27. Last modified 2026-06-17.