ExploitMatch
Back

CVE-2026-121205

Monitor on ThreatCluster

Description

Incorrect authorization in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)