CVE Catalog
CVE-2026-7360
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk0.16%
6th percentile - higher than 6% of all known CVEs
Summary
Insufficient validation of untrusted input in the Compositing component in Google Chrome prior to 147.0.7727.138 allows a remote attacker who has compromised the renderer process to bypass site isolation via a crafted HTML page.
Risk Assessment
An attacker can bypass site isolation mechanisms, potentially leading to data theft from other sites or code execution in the context of another domain.
Recommendation
Update Google Chrome to version 147.0.7727.138 or later.
Original NVD description (English source)
Insufficient validation of untrusted input. in Compositing in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)