This vulnerability involves a use-after-free condition in the Views component of Google Chrome before version 148.0.7778.96. Exploitation requires prior compromise of the renderer process and enables bypassing of site isolation protections via crafted HTML content. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and limited confidentiality impact. The vulnerability was published on May 6, 2026, with no known exploits reported. The vendor advisory points to a stable channel update but does not explicitly confirm patch availability.

Successful exploitation could allow an attacker with control over the renderer process to bypass site isolation, potentially exposing data from other sites within the browser process. The impact is limited to confidentiality with no integrity or availability effects reported. The medium CVSS score reflects the moderate risk given the prerequisite of renderer compromise and user interaction.

The vendor advisory linked corresponds to a stable channel update for Google Chrome. While explicit patch status is not confirmed in the provided data, it is strongly recommended to update Chrome to version 148.0.7778.96 or later to address this vulnerability. Users should apply the latest stable updates from Google Chrome to ensure remediation. Patch status is not yet fully confirmed—check the vendor advisory for current remediation guidance.