CVE-2026-9903 | BDVDB-2026-335993 Detail

Description#

Insufficient validation of untrusted input in Site Isolation in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted MHTML page. (Chromium security severity: High)

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-05-28Record published in the CVE List.
2. Version 22026-05-29Most recent update recorded in the CVE List.