An embedded browser is a web rendering engine built into another application so the app can display pages, login screens, help content, or other web-based UI without opening a separate browser. Many desktop tools and mobile apps use embedded browser components to make links and online features feel seamless.
In cyber security, embedded browsers matter because they extend the app’s trust boundary. If the host application accepts attacker-controlled URLs, scripts, or redirected content, flaws in the embedded engine or its configuration can lead to phishing, code injection, session theft, or local privilege abuse. Attackers may abuse custom protocol handlers to send a user from a trusted app into an embedded web view, then exploit weak isolation or outdated components. Defenders should keep embedded engines patched, restrict risky URL handling, and treat in-app web views as sensitive attack surface.