cve-2026-13993

The cve-2026-13993 tag covers reporting on a medium-severity Google Chrome vulnerability in the WebAppInstalls feature. A crafted HTML page, combined with specific user gestures, could misrepresent a domain during web app installation, creating a domain-spoofing risk at a point where users decide whether to trust a web application. Coverage focuses on Google’s disclosure, the National Vulnerability Database and CISA enrichment, and the Chrome release that fixed the issue before version 150.0.7871.47. This archive is useful for tracking the vulnerability’s behavior, security significance, and the browser update that addresses it.