Google Chrome’s Accessibility component does not sufficiently validate untrusted input, allowing a remote attacker who has already compromised the renderer process to bypass the site isolation boundary via a crafted HTML page. The weakness is a CWE‑20 input‑validation flaw, and the CVSS score of 8.1 reflects a high severity of potential compromise with elevated risk to site isolation.

All Google Chrome builds before version 150.0.7871.47 are affected. The vulnerability exists in the Chrome browser installed on desktops and laptops running the listed earlier versions. Users are advised to upgrade to Chrome 150.0.7871.47 or any later release to receive the input‑validation fix.

The EPSS score of less than 1 % indicates a very low likelihood of exploitation based on current knowledge, and the vulnerability is not listed in CISA’s KEV catalog. However, the requirement that an attacker must already possess renderer‑process execution renders the attack feasible in environments where such compromise is possible. For typical users the probability remains low, but in high‑risk or enterprise settings the potential for a site‑isolation bypass warrants prompt remediation. The CVSS score confirms the high severity of the issue.