Question 1

What is CVE-2026-13794 — CVE-2026-13794?

Accepted Answer

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

Question 2

What is the authoritative source for CVE-2026-13794?

Accepted Answer

CVE-2026-13794 (CVE-2026-13794) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-13794CVE-2026-13794

Description

Scoring