High severity7.4NVD Advisory· Published Feb 7, 2018· Updated Jun 17, 2026

CVE-2017-15397

Description

Inappropriate implementation in ChromeVox in Google Chrome OS prior to 62.0.3202.74 allowed a remote attacker in a privileged network position to observe or tamper with certain cleartext HTTP requests by leveraging that position.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/ChromeOS2 versions
cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:google:chrome_os:*:*:*:*:*:*:*:*range: <62.0.3202.74
- (no CPE)range: <62.0.3202.74

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/102435nvd
chromereleases.googleblog.com/2017/10/stable-channel-update-for-chrome-os_27.htmlnvd
crbug.com/627300nvd
wwws.nightwatchcybersecurity.com/2018/01/01/chromeos-doesnt-always-use-ssl-during-startup-cve-2017-15397/nvd

News mentions

No linked articles in our index yet.

cvss	0.481
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000