CVE-2017-5081: Debian Linux

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.

Affected products

• Debian Debian Linux: version 9.0 only
• Google Chrome: before 59.0.3071.86 (fixed in 59.0.3071.86); before 59.0.3071.92 (fixed in 59.0.3071.92)
• Red Hat Enterprise Linux Desktop: version 6.0 only
• Red Hat Enterprise Linux Server: version 6.0 only
• Red Hat Enterprise Linux Workstation: version 6.0 only

Published 2017-10-27. Last modified 2026-06-17.