Google Chrome Site Isolation Bypass Vulnerability

Vulnerability

A vulnerability in Google Chrome's site isolation feature, present in versions prior to 148.0.7778.96, allowed remote attackers to bypass site isolation protections. This was achieved through insufficient validation of untrusted input, enabling a compromised renderer process to exploit the vulnerability via a crafted HTML page.

Impact

Exploitation of this vulnerability could lead to a bypass of site isolation, potentially allowing for cross-site information leakage or other related attacks.

Remediation

Users can update to Google Chrome version 148.0.7778.96 or later to address this vulnerability.

Added: May 6, 2026, 8:09 PM
Updated: May 6, 2026, 8:09 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
3.1
exploitability
3.6
remediation
7.7
relevance
7.6
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.