Google and Microsoft disclosed CVE-2026-8010 on May 6, 2026, after Chrome 148 reached the desktop stable channel, fixing a SiteIsolation input-validation flaw in Chrome versions before 148.0.7778.96 that could let an attacker who already compromised the renderer bypass browser isolation with...