CVE-2026-76033 is a vulnerability in the Cross-Origin Resource Sharing (CORS) implementation in Google Chrome versions before 151.0.7922.169. This flaw permits a remote attacker, who already has control over the renderer process, to bypass the browser's site isolation protections by leveraging a specially crafted HTML page. The vulnerability is categorized under CWE-20 (Improper Input Validation) and has been assigned a moderate severity rating with a CVSS 3.1 base score of 4.2.

The vulnerability allows an attacker with compromised renderer process privileges to bypass site isolation, potentially enabling access to data or resources from other sites within the browser context. The impact is limited to confidentiality and integrity with no availability impact, and exploitation requires user interaction and high attack complexity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Users and administrators should monitor official Google Chrome security advisories for updates and apply patches once available.