Description
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)
CVSS 3.3EPSS 0.089%Risk 0.33
View source- Published
- 2026-07-08 23:16:52
- Affected versions
- <150.0.7871.115
- Type
- Web application
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N