This vulnerability in Google Chrome's Input handling allows an attacker with control over the renderer process to bypass site isolation protections by leveraging crafted HTML content. Site isolation is a critical security feature designed to prevent cross-site data leaks and attacks. The flaw exists in versions of Chrome prior to 149.0.7827.53. Although the vulnerability is rated as high severity by Chromium security, no CVSS score or explicit remediation level is provided in the available information. The vendor advisory URL is provided but does not contain explicit patch status in the input data.

An attacker who has already compromised the renderer process can exploit this vulnerability to bypass site isolation, potentially increasing the scope of attacks across different web origins. This could lead to unauthorized access to data from other sites loaded in the browser. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to Chrome version 149.0.7827.53 or later once confirmed. Until then, no specific mitigations are provided in the advisory.