cve-2026-5900

CVE-2026-5900 is a Chromium vulnerability that allows a remote attacker to bypass multi-download protections using a crafted HTML page. The flaw affects Chrome versions prior to 147.0.7727.55 and has been addressed in that release. Microsoft has also acknowledged the CVE in its Security Update Guide, indicating downstream impact for Chromium-based browsers. Discussions on WindowsForum.com cover the operational significance of this policy bypass, emphasizing that even seemingly minor browser security issues require attention as part of the broader Chromium patch cycle. The vulnerability highlights the ongoing challenge of balancing user convenience with security policy in browser download subsystems.