Race Condition in Google Chrome's WebAppInstalls

CVE-2026-91723

What is CVE-2026-91723?

A race condition vulnerability exists in the WebAppInstalls component of Google Chrome versions prior to 153.0.8010.47. This flaw enables remote attackers to potentially spoof user interface elements by delivering a specially crafted HTML page. By exploiting this vulnerability, an attacker could manipulate how information is presented to users, resulting in deceptive interactions that could compromise user security and trust.

References