vulnerability

Microsoft Edge Chromium:CVE-2023-0141: Insufficient policy enforcement in CORS

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Published
Jan 10, 2023
Added
Jan 13, 2023
Modified
Aug 11, 2025

Description

Insufficient policy enforcement in CORS in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

Solution

microsoft-edge-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.