CVE Catalog
CVE-2026-5897
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.15%
5th percentile - higher than 5% of all known CVEs
Summary
In Google Chrome prior to 147.0.7727.55, incorrect security UI in Downloads allowed a remote attacker to perform UI spoofing after convincing a user to engage in specific UI gestures. Severity: Low.
Risk Assessment
An attacker could spoof the download interface, potentially leading to fraud or malware installation.
Recommendation
Update Google Chrome to version 147.0.7727.55 or later.
Original NVD description (English source)
Incorrect security UI in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)