CVE-2017-5928: The W3C High Resolution Time API, as implemented in various web browsers, does not consider that memory-ref...

Security readout for executives and security teams

This CVE describes a browser timing weakness that can help a malicious web page infer sensitive memory behavior. The bundle does not identify specific browser versions, a CVSS score, or a vendor patch. Treat it as a side-channel exposure requiring vendor-specific browser guidance rather than an immediately confirmed enterprise-critical issue. Potential exposure is browser-based: users running browsers that implement the High Resolution Time API and execute untrusted JavaScript. The source bundle lists affected vendor and product as n/a, so exact enterprise exposure cannot be confirmed from these sources alone. Prioritize awareness and browser hygiene, especially for sensitive workstations. Urgency is limited by incomplete affected-product and patch evidence, but the class matters because browser side channels can cross normal web trust boundaries. Mitigation focus: Check browser vendor guidance for High Resolution Time and AnC-related mitigations.; Keep all browsers on current supported releases.; Limit untrusted JavaScript exposure for high-risk administrative workflows..

Prepared

Jun 13, 2026, 06:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.