CVE-2026-76033: Inappropriate implementation in CORS in Google Chrome prior
Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
- EPSS 0.3% (19.7% percentile)
- CVSS 4.2 medium