vulnerability

Google Chrome Vulnerability: CVE-2023-0141 Insufficient policy enforcement in CORS

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Published
Jan 11, 2023
Added
Jan 11, 2023
Modified
Aug 12, 2025

Description

Insufficient policy enforcement in CORS in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

Solution

google-chrome-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.