CVE-2017-5030VulnerabilityPublished 06/08/2022Updated 10/24/2026

CVE-2017-5030: Google Chromium V8 Memory Corruption Vulnerability

Affects Google Chromium V8Source CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 06/08/2022
KEV deadline: 06/22/2022
EPSS: 40.6% chance of exploitation in 30 days – higher than 98% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2017-5030 (opens in a new tab)

Description

CVE-2017-5030 is a memory corruption vulnerability in the Google Chromium V8 JavaScript engine that allows remote code execution via a crafted HTML page. This flaw affects multiple web browsers using Chromium's V8 engine, including Google Chrome, Microsoft Edge, and Opera. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.

Summary

The Google Chromium V8 engine contains a memory corruption vulnerability identified as CVE-2017-5030. This vulnerability enables a remote attacker to execute arbitrary code by delivering a specially crafted HTML page. Multiple Chromium-based browsers are potentially affected due to their use of the V8 engine. The vulnerability is associated with CWE-125 (Out-of-bounds Read). Exploitation in the wild has been observed, indicating active threat usage. No vendor advisory or patch details are included in the provided information.

Impact

Successful exploitation of this vulnerability allows remote attackers to execute arbitrary code on affected systems through crafted web content. This can lead to full compromise of the browser process and potentially the underlying system, depending on sandboxing and other mitigations. The presence of known exploits in the wild increases the urgency and risk associated with this vulnerability.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chromium security advisories for updates and apply patches promptly once available. Until a fix is confirmed, exercising caution when visiting untrusted websites is recommended.

Weaknesses

CWE-125Out-of-bounds Read (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 12:04:23 UTC

Weaknesses

References

Related threats