Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process… (CVE-2026-79228)

CVE-2026-79228 is an authorization bypass vulnerability in the SiteIsolation feature of Google Chrome versions before 152.0.7977.65. It enables a remote attacker, who has already compromised the renderer process, to bypass site isolation controls and access privileged pages by leveraging a crafted HTML page. The vulnerability is classified under CWE-863 (Incorrect Authorization).

The impact is limited to confidentiality loss (partial information disclosure) because the attacker can bypass site isolation to access privileged pages. There is no impact on integrity or availability. The CVSS vector indicates the attack requires network access, high attack complexity, no privileges, and user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or fix information is provided in the available data. Users should monitor official Google Chrome security advisories for updates and apply patches once available.