vulnerability
FreeBSD: VID-95a74a48-2691-11e7-9e2d-e8e0b747a45a (CVE-2017-5066): chromium -- multiple vulnerabilities
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:N/I:P/A:N) | Apr 21, 2017 | Apr 21, 2017 | Dec 10, 2025 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Apr 21, 2017
Added
Apr 21, 2017
Modified
Dec 10, 2025
Description
Google Chrome Releases reports: 29 security fixes in this release, including: [695826] High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360 [694382] High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani [684684] High CVE-2017-5059: Type confusion in Blink. Credit to SkyLined working with Trend Micro's Zero Day Initiative [683314] Medium CVE-2017-5060: URL spoofing in Omnibox. Credit to Xudong Zheng [672847] Medium CVE-2017-5061: URL spoofing in Omnibox. Credit to Haosheng Wang (@gnehsoah) [702896] Medium CVE-2017-5062: Use after free in Chrome Apps. Credit to anonymous [700836] Medium CVE-2017-5063: Heap overflow in Skia. Credit to Sweetchip [693974] Medium CVE-2017-5064: Use after free in Blink. Credit to Wadih Matar [704560] Medium CVE-2017-5065: Incorrect UI in Blink. Credit to Khalil Zhani [690821] Medium CVE-2017-5066: Incorrect signature handing in Networking. Credit to Prof. Zhenhua Duan, Prof. Cong Tian, and Ph.D candidate Chu Chen (ICTT, Xidian University) [648117] Medium CVE-2017-5067: URL spoofing in Omnibox. Credit to Khalil Zhani [691726] Low CVE-2017-5069: Cross-origin bypass in Blink. Credit to Michael Reizelman [713205] Various fixes from internal audits, fuzzing and other initiatives
Solutions
freebsd-upgrade-package-chromiumfreebsd-upgrade-package-chromium-pulse
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.