cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2017-5050,https://securityvulnerability.io/vulnerability/CVE-2017-5050,,"An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.",Google,"Google Chrome Prior To 57.0.2987.98 For Mac, Windows And Linux, And 57.0.2987.108 For Android",8.8,HIGH,0.001290000043809414,false,false,false,false,,false,false,2017-04-25T03:23:00.000Z,0 CVE-2017-5051,https://securityvulnerability.io/vulnerability/CVE-2017-5051,,"An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.",Google,"Google Chrome Prior To 57.0.2987.98 For Mac, Windows And Linux, And 57.0.2987.108 For Android",8.8,HIGH,0.001290000043809414,false,false,false,false,,false,false,2017-04-25T03:23:00.000Z,0 CVE-2017-5047,https://securityvulnerability.io/vulnerability/CVE-2017-5047,,"An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.",Google,"Google Chrome Prior To 57.0.2987.98 For Mac, Windows And Linux, And 57.0.2987.108 For Android",8.8,HIGH,0.001290000043809414,false,false,false,false,,false,false,2017-04-25T03:23:00.000Z,0 CVE-2017-5048,https://securityvulnerability.io/vulnerability/CVE-2017-5048,,"An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.",Google,"Google Chrome Prior To 57.0.2987.98 For Mac, Windows And Linux, And 57.0.2987.108 For Android",8.8,HIGH,0.001290000043809414,false,false,false,false,,false,false,2017-04-25T03:23:00.000Z,0 CVE-2017-5049,https://securityvulnerability.io/vulnerability/CVE-2017-5049,,"An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.",Google,"Google Chrome Prior To 57.0.2987.98 For Mac, Windows And Linux, And 57.0.2987.108 For Android",8.8,HIGH,0.001290000043809414,false,false,false,false,,false,false,2017-04-25T03:23:00.000Z,0 CVE-2017-5042,https://securityvulnerability.io/vulnerability/CVE-2017-5042,,"Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent.",Google,"Google Chrome Prior To 57.0.2987.98 For Mac, Windows And Linux, And 57.0.2987.108 For Android",5.7,MEDIUM,0.000590000010561198,false,false,false,false,,false,false,2017-04-24T23:59:00.000Z,0 CVE-2017-5043,https://securityvulnerability.io/vulnerability/CVE-2017-5043,,"Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a crafted Chrome extension.",Google,"Google Chrome Prior To 57.0.2987.98 For Linux, Windows And Mac",8.8,HIGH,0.018610000610351562,false,false,false,false,,false,false,2017-04-24T23:59:00.000Z,0 CVE-2017-5044,https://securityvulnerability.io/vulnerability/CVE-2017-5044,,"Heap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",Google,"Google Chrome Prior To 57.0.2987.98 For Mac, Windows And Linux, And 57.0.2987.108 For Android",6.3,MEDIUM,0.009890000335872173,false,false,false,false,,false,false,2017-04-24T23:59:00.000Z,0 CVE-2017-5045,https://securityvulnerability.io/vulnerability/CVE-2017-5045,,"XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed detection of a blocked iframe load, which allowed a remote attacker to brute force JavaScript variables via a crafted HTML page.",Google,"Google Chrome Prior To 57.0.2987.98 For Mac, Windows And Linux, And 57.0.2987.108 For Android",6.1,MEDIUM,0.003370000049471855,false,false,false,false,,false,false,2017-04-24T23:59:00.000Z,0 CVE-2017-5046,https://securityvulnerability.io/vulnerability/CVE-2017-5046,,"V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient policy enforcement, which allowed a remote attacker to spoof the location object via a crafted HTML page, related to Blink information disclosure.",Google,"Google Chrome Prior To 57.0.2987.98 For Mac, Windows And Linux, And 57.0.2987.108 For Android",4.3,MEDIUM,0.010029999539256096,false,false,false,false,,false,false,2017-04-24T23:59:00.000Z,0 CVE-2017-5036,https://securityvulnerability.io/vulnerability/CVE-2017-5036,,"A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to have an unspecified impact via a crafted PDF file.",Google,"Google Chrome Prior To 57.0.2987.98 For Mac, Windows And Linux, And 57.0.2987.108 For Android",7.8,HIGH,0.011529999785125256,false,false,false,false,,false,false,2017-04-24T23:59:00.000Z,0 CVE-2017-5037,https://securityvulnerability.io/vulnerability/CVE-2017-5037,,"An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.",Google,"Google Chrome Prior To 57.0.2987.98 For Mac, Windows And Linux, And 57.0.2987.108 For Android",7.8,HIGH,0.013399999588727951,false,false,false,false,,false,false,2017-04-24T23:59:00.000Z,0 CVE-2017-5029,https://securityvulnerability.io/vulnerability/CVE-2017-5029,,"The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.",Google,"Google Chrome Prior To 57.0.2987.98 For Mac, Windows And Linux, And 57.0.2987.108 For Android",8.8,HIGH,0.017079999670386314,false,false,false,false,,false,false,2017-04-24T23:59:00.000Z,0 CVE-2017-5040,https://securityvulnerability.io/vulnerability/CVE-2017-5040,,"V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a crafted HTML page.",Google,"Google Chrome Prior To 57.0.2987.98 For Mac, Windows And Linux, And 57.0.2987.108 For Android",4.3,MEDIUM,0.010029999539256096,false,false,false,false,,false,false,2017-04-24T23:59:00.000Z,0 CVE-2017-5030,https://securityvulnerability.io/vulnerability/CVE-2017-5030,,"Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.",Google,"Google Chrome Prior To 57.0.2987.98 For Linux, Windows And Mac, And 57.0.2987.108 For Android",8.8,HIGH,0.6425999999046326,true,false,false,true,,false,false,2017-04-24T23:59:00.000Z,0 CVE-2017-5033,https://securityvulnerability.io/vulnerability/CVE-2017-5033,,"Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP restrictions to local scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page, related to the unsafe-inline keyword.",Google,"Google Chrome Prior To 57.0.2987.98 For Mac, Windows And Linux, And 57.0.2987.108 For Android",4.3,MEDIUM,0.006560000125318766,false,false,false,false,,false,false,2017-04-24T23:59:00.000Z,0 CVE-2017-5038,https://securityvulnerability.io/vulnerability/CVE-2017-5038,,"Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a crafted Chrome extension.",Google,"Google Chrome Prior To 57.0.2987.98 For Linux, Windows And Mac",6.3,MEDIUM,0.009479999542236328,false,false,false,false,,false,false,2017-04-24T23:59:00.000Z,0 CVE-2017-5039,https://securityvulnerability.io/vulnerability/CVE-2017-5039,,"A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",Google,"Google Chrome Prior To 57.0.2987.98 For Mac, Windows And Linux, And 57.0.2987.108 For Android",7.8,HIGH,0.011529999785125256,false,false,false,false,,false,false,2017-04-24T23:59:00.000Z,0