Related Vulnerabilities: CVE-2017-5018  

An universal XSS flaw was found in the chrome://apps component of the Chromium browser.

Severity Medium

Remote Yes

Type Cross-site scripting

Description

An universal XSS flaw was found in the chrome://apps component of the Chromium browser.

AVG-156 chromium 55.0.2883.87-1 56.0.2924.76-1 Critical Fixed

27 Jan 2017 ASA-201701-33 AVG-156 chromium Critical multiple issues

https://bugzilla.redhat.com/show_bug.cgi?id=1416670
https://code.google.com/p/chromium/issues/detail?id=668665
https://chromereleases.googleblog.com/2017/01/stable-channel-update-for-desktop.html