CVE-2017-5030

A memory corruption vulnerability in Google's Chromium V8 engine allowed remote code execution via crafted HTML pages, impacting multiple browsers including Chrome and Edge, and actively exploited in the wild.

CVE-2017-5030 represents a significant risk for DIB organizations relying on Chromium-based browsers, potentially enabling attackers to execute arbitrary code on user systems. This impacts NIST 800-171 controls related to data protection and incident response; immediate patching and vulnerability scanning are critical. Failure to address this could lead to data compromise and regulatory penalties.

Shame score — The vulnerability's exploitation in the wild and potential for remote code execution demonstrate a serious security oversight by a major vendor, impacting a widely used product.