CVE-2024-5840

2024-06-1120:58:11

Chrome

www.cve.org

cve-2024-5840

policy bypass

cors

google chrome

remote attacker

access control

crafted html page

chromium

medium severity

EPSS

0.001

Percentile

21.9%

JSON

Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium)

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "version": "126.0.6478.54",
        "status": "affected",
        "lessThan": "126.0.6478.54",
        "versionType": "custom"
      }
    ]
  }
]