cve 2026-7360

CVE-2026-7360 is a high-severity Chromium compositing flaw fixed in Google Chrome 147.0.7727.137/138 on April 28, 2026. It affects desktop Chrome before 147.0.7727.138 and allows an attacker who already compromised the renderer process to bypass site isolation using a crafted HTML page. This is not a one-click remote-code-execution bug but a containment failure in the browser security model. For Windows users and administrators, it highlights that the modern browser is a stack of sandboxes, GPU paths, web engines, and enterprise dependencies that must be patched promptly. Discussions on WindowsForum.com cover the technical details, impact on Windows systems, and best practices for enterprise IT to mitigate such vulnerabilities.