n/a Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android
productEUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
critical
by severity
0critical9high6medium0low
updated 2026-10-27
01
vulnerabilities (15)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2017-5040US | medium4.3 | — |
| CVE-2017-5044US | medium6.3 | — |
| CVE-2017-5029US | high8.8 | — |
| CVE-2017-5033US | medium4.3 | — |
| CVE-2017-5046US | medium4.3 | — |
| CVE-2017-5045US | medium6.1 | — |
| CVE-2017-5039US | high7.8 | — |
| CVE-2017-5037US | high7.8 | — |
| CVE-2017-5036US | high7.8 | — |
| CVE-2017-5050US | high8.8 | — |
| CVE-2017-5049US | high8.8 | — |
| CVE-2017-5048US | high8.8 | — |
| CVE-2017-5047US | high8.8 | — |
| CVE-2017-5051US | high8.8 | — |
| CVE-2017-5042US | medium5.7OT elevated | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-190Integer Overflow or Wraparound6 CVEs
- CWE-416Use After Free2 CVEs
- CWE-787Out-of-bounds Write2 CVEs
- CWE-1223Race Condition for Write-Once Attributes1 CVEs
- CWE-20Improper Input Validation1 CVEs
- CWE-281Improper Preservation of Permissions1 CVEs
- CWE-311Missing Encryption of Sensitive Data1 CVEs
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs
03
sources (1)
Which sources assert this record, and when.
- EUEU Vulnerability Database (ENISA)15 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan