CVE-2026-5887

CVE-2026-5887

Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to bypass download restrictions via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-5887

An insufficient validation of untrusted input flaw was found in the Downloads component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=486079015

CVE-2026-5887

Chromium: CVE-2026-5887 Insufficient validation of untrusted input in Downloads

CVE-2026-5887

Insufficient validation of untrusted input in Downloads in Google Chro ...

GHSA-24v7-w2x9-2cxh

Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to bypass download restrictions via a crafted HTML page. (Chromium security severity: Medium)