cve 2026 7946

CVE-2026-7946 is a medium-severity Chromium vulnerability affecting Chrome versions before 148.0.7778.96. Disclosed by Google and Microsoft on May 6, 2026, the flaw allows a remote attacker who has already compromised the renderer process to bypass site isolation using a crafted HTML page. Site isolation is a critical security boundary that prevents one site from accessing another site's data in the browser. While not a headline-grabbing consumer bug, CVE-2026-7946 underscores the importance of prompt browser patching for enterprise defenders, as modern browser security has become as vital as operating system security. Users should update Chrome to version 148.0.7778.96 or later to mitigate the risk.