Policy Bypass in Downloads for Google Chrome by Google

CVE-2026-5900

What is CVE-2026-5900?

A vulnerability in Google Chrome allows a remote attacker to exploit a policy bypass in the Downloads feature. This issue occurs prior to version 147.0.7727.55 and can enable the circumvention of multi-download protections through a specially crafted HTML page. By leveraging this weakness, malicious actors could potentially download files without triggering standard security measures, posing a risk to users' data and device integrity.

References