Vulnerability in Google Chrome

CVE-2026-5897

Incorrect security UI in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

EPSS: 0.000 (8.6th percentile) — read the EPSS interpretation.

Affected products

References