VULNERABILITY INTELLIGENCE

CVE-2026-78953

CVSS score3.1 LOW

EPSS probability0.21%

CISA KEVNot currently listed

Published2026-08-25

Last modified2026-09-19

Description

Missing authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. (Chromium security severity: Medium)