[CVE-2026-14122] Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 15…

Descripción técnica

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Low)

Puntuación CVSS

Score: 8.1/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Productos afectados

Chrome, Windows — Google, Microsoft

Debilidades (CWE)

CWE-20

Fuente oficial

Publicado en NIST NVD.