EUVD-2026-116357

Improper resource exposure in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-121175

Prior to version 157.0.8103.38 , Google Chrome contained an improper resource exposure within the ORB component. This vulnerability allowed a remote attacker to bypass site isolation by delivering a crafted HTML page . The security severity is classified as Low .

EUVD-2026-116355

Incorrect authorization in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-121029

Google Chrome versions prior to 157.0.8103.38 are susceptible to an incorrect authorization vulnerability in the ORB component. This flaw allows a remote attacker to bypass site isolation by hosting a crafted HTML page. The Chromium security severity is classified as Low . Remediation is availabl...

EUVD-2026-116337

Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass site isolation via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-121253

Google Chrome versions prior to 157.0.8103.38 are vulnerable to a missing authorization flaw in DevTools . This vulnerability allows a remote attacker to leverage social engineering and a crafted Chrome extension to bypass site isolation . No specific exploit details or scanner source code are pr...

CVE-2026-121063

Google Chrome versions prior to 157.0.8103.38 are vulnerable to an incorrect authorization issue in CacheStorage . A remote attacker who has already compromised the renderer process can exploit this flaw by using a crafted HTML page to bypass site isolation . No specific exploit or scanner source...

EUVD-2026-116449

Incorrect authorization in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

firefox: thunderbird: Site isolation issue in the Panning and Zooming component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Panning and Zooming component...

firefox: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component...

firefox: Site isolation issue in the Networking component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Networking component...

CVE-2019-0808

CVE-2019-5786 and CVE-2019-0808 Chrome 72.0.3626.119 stable Windows 7 x86 exploit chain. This exploit uses site-isolation to brute-force CVE-2019-5786. host1wrapper/iframe.html is the wrapper script that loads the exploit repeatedly into an iframe. The actual chain resides in the host2singlerun...

CLEANSTART-2024-YS11958 Inappropriate implementation in Site isolation in Google Chrome prior to 89

Security vulnerability affects the qt5-qtwebengine package. Inappropriate implementation in Site isolation in Google Chrome prior to 89...

CLEANSTART-2024-WE35842 Use after free in Site Isolation in Google Chrome prior to 118

CVE-2023-5218 affects multiple packages. Use after free in Site Isolation in Google Chrome prior to 118. See references for individual vulnerability details...

CVE-2019-5786

CVE-2019-5786 Chrome 72.0.3626.119 stable FileReader UaF exploit for Windows 7 x86. This exploit uses site-isolation to brute-force the vulnerability. iframe.html is the wrapper script that loads the exploit, contained in the other files, repeatedly into an iframe. host iframe.html on one site an...

Trespasser

CVE-2026-74970 · Firefox Fission site-isolation bypass via missing PipelineId namespace check This directory holds an honest reproduction scaffold for a Fission site-isolation authorization bypass in Firefox WebRender. Under Fission each content process owns a distinct PipelineId namespace, but t...

CVE-2026-109759

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Networking component...

CVE-2026-109750

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the DOM: Web Authentication component...

firefox: thunderbird: Site isolation issue in the Panning and Zooming component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Panning and Zooming component...

firefox: thunderbird: Site isolation issue in the Panning and Zooming component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Panning and Zooming component...