PT-2026-31515

CVE-2026-5897

·

Published

2025-05-24

·

Updated

2026-08-31

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55
Description A security flaw in the Downloads user interface in Google Chrome, before version 147.0.7727.55, could allow a remote attacker to perform UI spoofing. This requires convincing a user to perform specific UI gestures on a crafted HTML page.
Recommendations Update Google Chrome to version 147.0.7727.55 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-451: User Interface (UI) Misrepresentation of Critical Information
CWE-290: Authentication Bypass by Spoofing
Related identifiers
CVE-2026-5897
BDU:2026-04991
OPENSUSE-SU-2026:10530-1
OPENSUSE-SU-2026:20575-1
OPENSUSE-SU-2026:20660-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com