CVE Catalog
CVE-2026-5900
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.16%
5th percentile - higher than 5% of all known CVEs
Summary
Google Chrome prior to 147.0.7727.55 has a policy bypass in Downloads, allowing a remote attacker to bypass multi-download protections via a crafted HTML page. (Severity: Low)
Risk Assessment
Risk of forced multiple downloads without proper warning, potentially facilitating malware distribution.
Recommendation
Update Google Chrome to version 147.0.7727.55 or later.
Original NVD description (English source)
Policy bypass in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass of multi-download protections via a crafted HTML page. (Chromium security severity: Low)