I'm thinking aria-errormessage, like aria-details might need to be an ID reference list rather than a single reference.

Use case: A password-creation field which may have/display multiple errors:

• "Password must be between 10 and 35 characters"
• "Password must contain at least one punctuation symbol"