cve 2026 5897

CVE-2026-5897 is a low-severity UI spoofing vulnerability affecting the Downloads interface in Google Chrome versions prior to 147.0.7727.55. A remote attacker could exploit this flaw using a crafted HTML page combined with specific user gestures to spoof the browser's download UI. While the Chromium project rates it as Low severity, the vulnerability also impacts Chromium-based Microsoft Edge, as reflected in Microsoft's Security Update Guide. This tag covers discussions on why even low-severity browser bugs matter for operational security, the importance of maintaining patch hygiene across Chromium browsers, and how downstream advisories from Microsoft signal that Edge users should treat this CVE as part of their normal update routine.