Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-5840

Fixed in a distro release EPSS <1%CVSS 6.5

Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium)

Published 2024-06-11 · CVE record · OSV

Products: Google Chrome, fedoraproject fedora

Distro releases

ReleasePackageFixed in
Chainguardchromium126.0.6478.55-r0
Chainguardchromium-docker-selenium-compat126.0.6478.55-r0
Chainguardchromium-lang126.0.6478.55-r0
Chainguardchromium-qt126.0.6478.55-r0
Debian 12chromium126.0.6478.56-1~deb12u1
Debian 13chromium126.0.6478.56-1
Debian 14chromium126.0.6478.56-1
SUSE Package Hub 15 SP5chromium126.0.6478.126-bp156.2.6.1
SUSE Package Hub 15 SP6chromium126.0.6478.126-bp156.2.6.1
Wolfichromium126.0.6478.55-r0
Wolfichromium-docker-selenium-compat126.0.6478.55-r0
Wolfichromium-lang126.0.6478.55-r0
Wolfichromium-qt126.0.6478.55-r0
openSUSE Leap 15.5chromium126.0.6478.126-bp156.2.6.1
openSUSE Leap 15.5 NonFreeopera112.0.5197.25-lp155.3.54.1
openSUSE Leap 15.6chromium126.0.6478.126-bp156.2.6.1
openSUSE Leap 15.6 NonFreeopera112.0.5197.25-lp156.2.11.1
openSUSE Tumbleweedchromium126.0.6478.126-1.1