CVE-2019-5811 REJECTED

Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page.

EPSS 1.00% · 76.9th percentile

Risk Scores

EPSS Score
1.00%
76.9th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSchromium-browser0, 45.0.2454.101-0ubuntu1.1201, 47.0.2526.73-0ubuntu1.1218
Ubuntu:18.04:LTSchromium-browser65.0.3325.146-0ubuntu1, 0, 61.0.3163.100-0ubuntu1.1378

Timeline

References

Open in Interactive Console →