Executive brief
A security vulnerability in Google Chrome's AI component could allow a remote attacker to bypass Site Isolation protections. Site Isolation is a critical security feature that keeps data from different websites separate to prevent one site from stealing information from another. In a real-world scenario, an attacker who has already partially compromised a user's browser session could use this flaw to access sensitive data across different web pages.
Technical details
This vulnerability is classified as insufficient policy enforcement within the AI component of Google Chrome. The flaw resides in how the browser manages security boundaries between different web origins. An attacker who has already achieved code execution within a compromised renderer process can exploit this weakness by using a specially crafted HTML page to bypass Site Isolation. Successfully bypassing Site Isolation allows the attacker to access data or resources from other sites that should be restricted to their own sandboxed processes. The issue is resolved in Chrome version 148.0.7778.168 and later.
Affected products
- Google Chrome Prior to 148.0.7778.168
Timeline
- 2026-03-01: disclosed: Reported by Tianyi Hu
- 2026-05-12: patched: Fixed in Stable Channel Update 148.0.7778.167/168
- 2026-05-14: advisory: NVD publication date