PT-2026-31515 · Google+1 · Google Chrome+1

Farras Givari

·

CVE-2026-5897

·

Published

2025-05-24

·

Updated

2026-08-31

CVSS v2.0

5.0

Medium

VectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55
Description A security flaw in the Downloads user interface in Google Chrome, before version 147.0.7727.55, could allow a remote attacker to perform UI spoofing. This requires convincing a user to perform specific UI gestures on a crafted HTML page.
Recommendations Update Google Chrome to version 147.0.7727.55 or later.

Fix

Authentication Bypass by Spoofing

UI Misrepresentation of Critical Information

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-290CWE-451

Related Identifiers

BDU:2026-04991
CVE-2026-5897
OPENSUSE-SU-2026:10530-1
OPENSUSE-SU-2026:20575-1
OPENSUSE-SU-2026:20660-1

Affected Products

Google Chrome
Red Os