Common CORS headers include Access-Control-Allow-Origin, Access-Control-Allow-Methods, and Access-Control-Allow-Headers. These headers specify which origins can access the resource, which HTTP methods are allowed, and which headers can be used in the request.