Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-d6dn-kq3e-gya6
Vulnerability ID VCID-d6dn-kq3e-gya6
Aliases CVE-2017-2528
Summary Multiple vulnerabilities have been found in WebKitGTK+, the worst of which allows remote attackers to execute arbitrary code.
Status Published
Exploitability 2.0
Weighted Severity 0.0
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
Data source Exploit-DB
Date added June 1, 2017
Description WebKit - CachedFrame does not Detach Openers Universal Cross-Site Scripting
Ransomware campaign use Known
Source publication date June 1, 2017
Exploit type webapps
Platform multiple
Source update date June 1, 2017
Source URL https://bugs.chromium.org/p/project-zero/issues/detail?id=1176
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.79753
EPSS Score 0.01311
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T12:58:44.111225+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201706-15 38.0.0