CVE-2017-5006

Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled object owner relationships, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.

Date published : 2017-02-17

http://www.securityfocus.com/bid/95792

https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html