Google Chrome’s Accessibility component fails to validate untrusted input, allowing a remote attacker who has already compromised page that bypasses site isolation. The vulnerability is a CWE‑20 input validation weakness with a CVSS score of 8.1, indicating a high severity propensity for cross‑site data leakage or elevated compromise.

All Google Chrome installations built before version 150.0.7871.47 are affected. The affected product is the Chrome browser from Google. Users should upgrade to version 150.0.7871.47 or any later release to receive the input‑validation fix.

The EPSS score of less than 1% signals a very low probability of exploitation based on current knowledge, and the vulnerability is not listed in CISA’s KEV catalog. Nonetheless, the requirement that an attacker already possess renderer‑process execution increases risk in environments where such compromise is feasible. For typical users the likelihood remains low, but in high‑risk or enterprise environments the potential for a site‑isolation bypass warrants prompt remediation. The CVSS score of 8.1 confirms high severity.