A high-severity authorization vulnerability in Google Chrome allows remote attackers to bypass site isolation protections via malicious PDF files.

This flaw is caused by incorrect authorization logic within the FileSystem component. A remote, unauthenticated attacker can exploit this via a crafted PDF to bypass site isolation if they have already compromised the renderer process.

Successful exploitation of this vulnerability permits unauthorized access to sensitive data and potential cross-site information disclosure. Given the CVSS score of 8.1, the risk is classified as High, as it undermines core browser security boundaries designed to protect user sessions and private information from malicious websites.

Immediate Action: Update Google Chrome to version 153.0.8010.36 or later immediately to apply the necessary authorization fixes.

Proactive Monitoring: Monitor endpoint security logs for unusual browser activity or repeated crashes involving the renderer process.

Compensating Controls: While no direct virtual patch exists, ensuring that users are restricted from downloading or opening untrusted PDF files from unknown sources can reduce the attack surface.

Public Exploit Available: Unknown

The vulnerability represents a critical failure in the site isolation mechanism of the Google Chrome browser. Security teams must prioritize the deployment of the 153.0.8010.36 update across all managed workstations to ensure that the authorization bypass is remediated and that users are protected from potential cross-site data theft.