CVE-2017-5015

6.5
MEDIUMCVSS v3.1 Base Score
1.34%
LOW RiskEPSS (70th percentile)
NVD-CWE-noinfo

Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled Unicode glyphs, which allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.

Published: 2/17/2017
Modified: 6/17/2026
Back to CVE Lookup

Vulnerability Summary

CVSS v3 Score

6.5MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CVSS v2 Score

4.3

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS Score (Exploitation Probability)

1.34%LOW Exploitation Risk
70th percentile

This vulnerability has a 1.34% probability of being exploited in the next 30 days, ranking higher than 70% of all scored CVEs.

CWE Classification

NVD-CWE-noinfo
Advertisement