Описание
Insufficient validation of untrusted input in CORS in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
Ссылки
- Release NotesVendor Advisory
- Permissions Required
Уязвимые конфигурации
Одновременно
Одно из
EPSS
3.1 Low
CVSS3
Дефекты
Связанные уязвимости
Insufficient validation of untrusted input in CORS in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
Insufficient validation of untrusted input in CORS in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
Chromium: CVE-2026-7968 Insufficient validation of untrusted input in CORS
Insufficient validation of untrusted input in CORS in Google Chrome pr ...
Insufficient validation of untrusted input in CORS in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
EPSS
3.1 Low
CVSS3