CVE-2017-15397: Inappropriate implementation in ChromeVox in Google Chrome OS prior to 62.0.3202.74 allowed a remote attack...

Security readout for executives and security teams

This flaw affected ChromeVox on Google Chrome OS before 62.0.3202.74. In a privileged network position, an attacker could observe or tamper with certain cleartext HTTP requests during startup-related behavior. This is not described as internet-wide remote code execution, but it could matter on hostile or controlled networks. Exposure is likely limited to Chrome OS devices running versions before 62.0.3202.74, especially when used on untrusted, hostile, or attacker-controlled networks. Modern managed fleets should be unaffected if they enforce current Chrome OS updates. Treat this as a cleanup and legacy exposure issue unless old Chrome OS devices remain in use. Prioritize verification in managed fleets, schools, kiosks, and shared-network environments where attackers may control or observe network traffic. Mitigation focus: Update affected Chrome OS devices to 62.0.3202.74 or later.; Confirm managed devices are receiving Chrome OS security updates.; Retire or isolate Chrome OS devices that cannot receive current updates..

Prepared

Jun 7, 2026, 20:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.