Insufficient Input Validation Vulnerability in Google Chrome by Google
CVE-2026-7360

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
28 April 2026

What is CVE-2026-7360?

A vulnerability exists in Google Chrome due to insufficient validation of untrusted input within the compositing process. This flaw allows a remote attacker to potentially bypass site isolation protections by leveraging a crafted HTML page. If an attacker compromises the renderer process, they could exploit this weakness to execute malicious actions, making it essential for users to keep their browsers updated to the latest version.

Affected Version(s)

Chrome 147.0.7727.138

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.