VDB
CISA-2024-5840
CISA-2024-5840
PUBLISHED
CVSS 6.5 MEDIUM
Reported by Chrome · Published June 11, 2024
Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium)
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Chrome | 126.0.6478.54 | |
| Chrome | 126.0.6478.54, 126.0.6478.54 | |
| chrome | 0, 0 | |
| fedoraproject | fedora | 39, 40, 39 |
Timeline
- Jun 11, 2024 CVE Published
- Mar 13, 2025 CVE Updated