This vulnerability involves insufficient enforcement of download policies in Google Chrome versions before 148.0.7778.96. A local attacker can exploit this weakness by crafting an HTML page that bypasses navigation restrictions intended to control download behavior. The vulnerability was publicly disclosed with medium severity by Chromium security, but no detailed technical exploitation methods or impact scenarios are provided. The vendor advisory linked corresponds to a stable channel update announcement without explicit mention of a fix for this issue.

The vulnerability allows a local attacker to bypass navigation restrictions related to downloads in affected Chrome versions. This could potentially lead to unauthorized navigation or download actions that violate intended policy controls. There are no known exploits in the wild reported at this time. The impact is limited to local attackers and does not indicate remote exploitation or broader system compromise based on the available information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The linked Google Chrome stable channel update announcement does not explicitly confirm a fix for this vulnerability. Users should monitor official Google Chrome release notes and update to the latest version once a fix is confirmed. No additional vendor-recommended mitigations are provided in the advisory.