cve 2026 5892

CVE-2026-5892 is a Chromium vulnerability affecting Google Chrome versions before 147.0.7727.55 and Microsoft Edge. The flaw involves insufficient policy enforcement in Progressive Web Apps (PWAs), allowing a remote attacker who has compromised the renderer process to install a PWA without user consent via a crafted HTML page. Microsoft has included this CVE in its Security Update Guide, indicating that Edge users should apply the upstream Chromium fix. Discussions on WindowsForum highlight the need for prompt patching and awareness of browser security issues that may not appear severe on paper but pose real risks. The tag covers patch guidance, affected versions, and the broader implications for Chromium-based browsers.