← Database

CVE-2024-5840

MEDIUM CVSS: 6.5 Published: 2024-06-11 Modified: 2026-06-17

Description

Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium)

Affected Platforms

Fedoraproject FedoraGoogle Chrome

Weakness Type

NVD-CWE-noinfo, CWE-284

References