CVE Catalog
CVE-2026-5887
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.19%
9th percentile - higher than 9% of all known CVEs
Summary
Google Chrome on Windows prior to 147.0.7727.55 has insufficient validation in Downloads, allowing bypass of download restrictions via crafted HTML.
Risk Assessment
Risk of downloading and executing malware on the user's machine.
Recommendation
Update Google Chrome on Windows to version 147.0.7727.55 or later.
Original NVD description (English source)
Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to bypass download restrictions via a crafted HTML page. (Chromium security severity: Medium)