Google and Microsoft listed CVE-2026-7946 on May 6, 2026, as a medium-severity Chromium flaw in Chrome before 148.0.7778.96 that could let a remote attacker who had already compromised the renderer bypass site isolation through a crafted HTML page. The phrase “medium severity” is doing a lot of...
Google and Microsoft disclosed CVE-2026-8010 on May 6, 2026, after Chrome 148 reached the desktop stable channel, fixing a SiteIsolation input-validation flaw in Chrome versions before 148.0.7778.96 that could let an attacker who already compromised the renderer bypass browser isolation with...