---
id: 7440
title: "[CVE-2017-5124] Lỗi nghiêm trọng trên trình duyệt nguồn mở Chromium"
cve: CVE-2017-5124
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/loi-nghiem-trong-tren-trinh-duyet-trinh-duyet-nguon-mo-chromium/"
published_at: "2017-12-17T08:26:00Z"
tags: ["browser-security", "xss", "chromium", "cve-2017-5124", "uxss", "mhtml"]
phying_url: "https://phying.com/item/7440"
lang: en
---

# [CVE-2017-5124] Lỗi nghiêm trọng trên trình duyệt nguồn mở Chromium

## Summary

CVE-2017-5124 is a Universal Cross-site Scripting (UXSS) flaw in Chromium's MHTML handling affecting version 62 and below, letting attackers bypass browser security and read cookies across open tabs.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **CVE:** CVE-2017-5124
- **Published:** 2017-12-17T08:26:00Z
- **Original:** https://blog.viettelcybersecurity.com/loi-nghiem-trong-tren-trinh-duyet-trinh-duyet-nguon-mo-chromium/
- **Phying News:** https://phying.com/item/7440