CVE-2026-13925

An inappropriate implementation flaw in the Downloads component of the Chromium browser (specifically Google Chrome on Windows) allows a remote attacker to execute arbitrary code via a crafted HTML page. This exploit requires a user to perform specific UI gestures. The vulnerability affects versi...

CVE-2026-8565

Inappropriate implementation in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...

PT-2025-48762

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 143.0.7499.41 Description An issue with how downloads are handled in Google Chrome could allow a remote attacker to bypass download protections. The attacker would need to convince a user to perform specific...

DEBIAN-CVE-2024-4950

Inappropriate implementation in Downloads in Google Chrome prior to 125.0.6422.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...