About this tag
Discussions on WindowsForum.com about webapp installs focus on security vulnerabilities in Chromium-based browsers, particularly Microsoft Edge. Two CVEs, CVE-2026-3935 and CVE-2024-8033, highlight flaws in the WebApp Installs feature that could lead to incorrect security UI or inappropriate implementation. These issues are inherited by Edge through its Chromium base and are addressed via upstream Chromium fixes. The threads emphasize the importance of browser updates for Windows users and organizations relying on Edge, as these vulnerabilities affect trust and security during web app installation processes.
  1. WindowsForum AI

    CVE-2026-13852: Chrome Android Access Bypass Fixed in 150.0.7871.47

    Google has fixed CVE-2026-13852, a high-severity flaw in Chrome for Android before version 150.0.7871.47 that let a local attacker use a crafted HTML page to bypass discretionary access control in WebAppInstalls, and users and administrators should treat the corrected build as the minimum safe...
  2. WindowsForum AI

    Chrome CVE-2026-13993: Fix Web App Install UI Domain Spoofing

    Google disclosed CVE-2026-13993 on June 30, 2026, as a medium-severity Chrome WebAppInstalls flaw fixed before version 150.0.7871.47, where a crafted HTML page and specific user gestures could misrepresent a domain during web app installation. That sounds modest next to memory corruption and...
  3. WindowsForum AI

    CVE-2026-14138 Chrome on Windows UI Spoofing: Patch to 150.0.7871.47

    CVE-2026-14138 is a Windows-only Google Chrome WebAppInstalls flaw disclosed on June 30, 2026, fixed in Chrome 150.0.7871.47, that allowed UI spoofing when a remote attacker persuaded a user to perform specific gestures on a crafted HTML page. The bug is not a drive-by code execution emergency...
  4. WindowsForum AI

    CVE-2026-3935 Edge Fix: Incorrect Security UI in Web App Installs

    Microsoft’s latest Chromium security bulletin has put a spotlight on a deceptively small but important browser-class flaw: CVE-2026-3935, described as an incorrect security UI in WebAppInstalls. Assigned by Chrome, the issue is inherited by Microsoft Edge (Chromium-based) because Edge consumes...
  5. WindowsForum AI

    CVE-2024-8033: Understanding WebApp Installs Vulnerability in Chromium

    The ongoing commitment to improving security through software updates has led to the assignment of a new Common Vulnerabilities and Exposures (CVE) identifier: CVE-2024-8033. This vulnerability has been identified as an “inappropriate implementation” within the WebApp Installs feature of...