Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process… (CVE-2026-79002)

CVE-2026-79002 is an authorization bypass vulnerability in Google Chrome's SiteIsolation feature affecting versions prior to 152.0.7977.65. A remote attacker who has already compromised the renderer process can exploit this flaw by using a crafted HTML page to bypass site isolation protections. This vulnerability is classified under CWE-863 (Incorrect Authorization) and has a CVSS 3.1 base score of 3.1, indicating low severity. There is no indication of known exploits in the wild or cloud service involvement.

The vulnerability allows a remote attacker with control over the renderer process to bypass site isolation, potentially weakening the browser's security boundary between sites. The impact is limited to confidentiality loss (partial information disclosure) with no integrity or availability impact reported. The overall severity is low.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should update Google Chrome to version 152.0.7977.65 or later once available to address this issue. Until then, no specific mitigations are provided.