← Database

CVE-2021-38019

MEDIUM CVSS: 6.5 Published: 2021-12-23 Modified: 2026-06-17

Description

Insufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Affected Platforms

Debian Debian LinuxFedoraproject FedoraGoogle Chrome

Weakness Type

CWE-670

References