Skip to content

CVE record · 1 source

CVE-2026-121138

Observable discrepancy in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.

Vendor: Google
Product: Chrome
Weakness: CWE-203
Exposure class: Browser

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

13

CVE NVD 6d ago

Observable discrepancy in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.

Observable discrepancy in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-121138 Google