Incorrect Authorization in CORS Affects Google Chrome

CVE-2026-121205

What is CVE-2026-121205?

A security flaw in Google Chrome allowed unauthorized access through a bypass of the web origin policy due to incorrect handling of CORS protocols. This vulnerability enabled remote attackers to exploit the issue using social engineering techniques, particularly through specially crafted HTML pages, posing significant risks to user data and web application security. Users of Google Chrome should ensure they update to the latest version to mitigate potential risks. For further details, please refer to the Chromium security updates and issue discussions on Chromium.

References