Security Advisory

CVE-2017-15403

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-01-09 19:00:00
Last updated 2024-08-05 19:57:25
Assigner Chrome
CVSS score not scored
State PUBLISHED

Description

Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page.