cve 2026-8010

  1. CVE-2026-8010 SiteIsolation Bypass: Why “Low” Means High Exploit-Chain Value

    Google and Microsoft disclosed CVE-2026-8010 on May 6, 2026, after Chrome 148 reached the desktop stable channel, fixing a SiteIsolation input-validation flaw in Chrome versions before 148.0.7778.96 that could let an attacker who already compromised the renderer bypass browser isolation with...