CVE-2017-5088: Google Chrome

High severity, CVSS 8.8. EPSS: 3.2% chance of exploitation in the next 30 days.

Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

Affected products

• Google Chrome: before 59.0.3071.104 (fixed in 59.0.3071.104); before 59.0.3071.117 (fixed in 59.0.3071.117)
• Red Hat Enterprise Linux Desktop: version 6.0 only
• Red Hat Enterprise Linux Server: version 6.0 only
• Red Hat Enterprise Linux Workstation: version 6.0 only

Published 2017-10-27. Last modified 2026-06-17.