CVE-2026-106287
Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network t
CVSS
4.3
Medium
EPSS
0.2%
p10
KEV
—
Exploit Today
3
0-100
Published: Oct 6, 2026 · Last modified: Oct 13, 2026 · CWE-221
0.2%EPSS · 30 days0.2%
2026-10-072026-10-22
Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-875356.5 MED26.2%
——8Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)43dCVE-2025-623065.0 MED19.1%
——6HCL IntelliOps Event Management (IEM) is affected by information omission. The lack of information breaks auditability and observability of a workflow. if an attacker were to gain access to the application, the insufficient logging could hinder incident response.24d