This vulnerability in Google Chrome affects the Downloads feature on Windows platforms before version 147.0.7727.55. It stems from insufficient validation of untrusted input, enabling a remote attacker to circumvent download restrictions via a specially crafted HTML page. The issue was publicly disclosed on April 8, 2026, and is noted as medium severity by the Chromium security team. The vendor advisory link is provided but does not explicitly confirm patch availability or remediation status in the input data.

An attacker can bypass download restrictions in affected Chrome versions on Windows, potentially leading to unauthorized downloads that users or administrators intended to block. This could facilitate delivery of malicious files or bypass security controls related to downloads. There is no indication of exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to Chrome version 147.0.7727.55 or later once confirmed patched. Until then, exercise caution with untrusted web content that initiates downloads.