NetSight
IP …
medium6.5

CVE-2024-5840

Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page.

Impact

Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium)

Affected products

VendorProductAffected versions
GoogleChrome
before 126.0.6478.54
FedoraprojectFedora
Versions 39, 40

Weakness classification

CWE-284

References