Insufficient Policy Enforcement in Google Chrome Affects Multiple Versions
CVE-2026-8568

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
14 May 2026

What is CVE-2026-8568?

A security vulnerability in Google Chrome enables remote attackers to exploit insufficient policy enforcement. By compromising the renderer process, attackers can bypass Site Isolation protections through a specially crafted HTML page, potentially leading to data exposure and unauthorized access. This flaw affects versions of Google Chrome prior to 148.0.7778.168, highlighting the importance of regular updates to maintain security integrity.

Affected Version(s)

Chrome 148.0.7778.168

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.