A vulnerability in Google Chrome's SiteIsolation feature prior to version 148.0.7778.96 allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. The issue is due to insufficient validation of untrusted input. The vulnerability is rated with a low severity and has a CVSS score of 3.1.