webapp installs

Google has fixed CVE-2026-13852, a high-severity flaw in Chrome for Android before version 150.0.7871.47 that let a local attacker use a crafted HTML page to bypass discretionary access control in WebAppInstalls, and users and administrators should treat the corrected build as the minimum safe...

Google disclosed CVE-2026-13993 on June 30, 2026, as a medium-severity Chrome WebAppInstalls flaw fixed before version 150.0.7871.47, where a crafted HTML page and specific user gestures could misrepresent a domain during web app installation. That sounds modest next to memory corruption and...

CVE-2026-14138 is a Windows-only Google Chrome WebAppInstalls flaw disclosed on June 30, 2026, fixed in Chrome 150.0.7871.47, that allowed UI spoofing when a remote attacker persuaded a user to perform specific gestures on a crafted HTML page. The bug is not a drive-by code execution emergency...

Microsoft’s latest Chromium security bulletin has put a spotlight on a deceptively small but important browser-class flaw: CVE-2026-3935, described as an incorrect security UI in WebAppInstalls. Assigned by Chrome, the issue is inherited by Microsoft Edge (Chromium-based) because Edge consumes...

The ongoing commitment to improving security through software updates has led to the assignment of a new Common Vulnerabilities and Exposures (CVE) identifier: CVE-2024-8033. This vulnerability has been identified as an “inappropriate implementation” within the WebApp Installs feature of...