Threats tagged 'ghsa-m6pj-5274-pwcq'

A vulnerability in Google Chrome prior to version 148.0.7778.96 involves insufficient validation of untrusted input in the CORS implementation. This flaw could allow a remote attacker who has compromised the renderer process to bypass the same origin policy via a crafted HTML page. The issue has a low severity rating and a CVSS score of 3.1.