CVE-2023-2726

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 113.0.5672.126

Description The issue is related to an inappropriate implementation in WebApp Installs, allowing an attacker to bypass security restrictions. This can be achieved by convincing a user to install a malicious web app via a crafted HTML page. The attacker, acting remotely, can exploit this to bypass the install dialog.

Recommendations For versions prior to 113.0.5672.126, update to version 113.0.5672.126 or later to resolve the issue. As a temporary workaround, consider restricting the installation of web apps to minimize the risk of exploitation. Avoid using crafted HTML pages that could bypass the install dialog until the issue is resolved.