CVE record · 2 sources
CVE-2026-102320
Missing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass…
- Vendor
- Product
- chrome, chromium
- EPSS
- 0.002 (p12)
- Exposure class
- Browser
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Stable Channel Update for Desktop
The Stable channel has been updated to 154.0.8037.92/.93 for Windows and Mac and 154.0.8037.92 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes…
-
Missing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass…
Missing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)