This vulnerability involves an inappropriate implementation in the Site Isolation feature of Google Chrome before version 151.0.7922.72. Site Isolation is a security mechanism designed to separate different websites into different processes to prevent data leaks across sites. The flaw allows a remote attacker to bypass this isolation by delivering a crafted HTML page, potentially exposing sensitive information or causing denial of service. The CVSS v3.1 base score is 5.4 (medium), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, limited confidentiality impact, no integrity impact, and low availability impact. The vendor advisory linked does not specify if a fix is available or if users must take action.

The vulnerability allows remote attackers to bypass site isolation protections, which may lead to limited confidentiality loss and potential denial of service. There is no indication of integrity compromise. No active exploitation is known. The impact is rated medium severity with a CVSS score of 5.4.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Users should update to version 151.0.7922.72 or later once confirmed patched. No other specific mitigations are provided by the vendor advisory.