Google Chrome Insufficient Policy Enforcement in Downloads Allowing Navigation Restriction Bypass

Vulnerability

A vulnerability in Google Chrome prior to version 148.0.7778.96 allows local attackers to bypass navigation restrictions in the Downloads feature by using a crafted HTML page. This issue arises from inadequate policy enforcement, which could be exploited to manipulate navigation behaviors in a way that circumvents intended restrictions.

Impact

Exploitation of this vulnerability could lead to unauthorized bypassing of navigation restrictions, potentially allowing for malicious manipulation of download behaviors or interactions.

Remediation

Users can update to Google Chrome version 148.0.7778.96 or later to address this vulnerability.

Added: May 6, 2026, 8:31 PM
Updated: May 6, 2026, 8:31 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
0.6
exploitability
4.2
remediation
7.7
relevance
7.6
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.