vulnerability

Google Chrome Vulnerability: CVE-2024-5840 Policy Bypass in CORS

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:N/I:C/A:N)
Published
06/12/2024
Added
06/12/2024
Modified
01/28/2025

Description

Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium)

Solution

google-chrome-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.