Incomplete cleanup in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to… (CVE-2026-78903)
Description
An incomplete cleanup vulnerability in the SiteIsolation feature of Google Chrome prior to version 152.0.7977.65 allows a remote attacker who has compromised the renderer process to bypass site isolation using a crafted HTML page. The vulnerability has a low severity rating and a CVSS score of 3.1.
CVSS v3.1
Score 3.1low
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-78903 describes an incomplete cleanup issue in the SiteIsolation component of Google Chrome versions before 152.0.7977.65. This flaw permits a remote attacker, who already controls the renderer process, to bypass the site isolation security boundary by leveraging a specially crafted HTML page. The vulnerability is classified under CWE-459 (incomplete cleanup).
Potential Impact
The impact is limited to confidentiality loss (partial bypass of site isolation) without integrity or availability effects. Exploitation requires prior compromise of the renderer process and user interaction. The overall severity is low, reflecting limited impact and exploitation complexity.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Users should monitor for updates from Google Chrome regarding this vulnerability and apply updates once available.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-q5r9-8rpf-9h3p
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-78903"]
- Database Specific Severity
- LOW
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6a91a878acd9273b49069dd6
Added to database: 08/28/2026, 15:25:44 UTC
Last enriched: 09/09/2026, 22:52:57 UTC
Last updated: 10/12/2026, 18:48:23 UTC
Views: 58
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.