This vulnerability in Google Chrome's Downloads feature arises from insufficient validation of untrusted input, which could be exploited by a remote attacker through a crafted HTML page to execute arbitrary code on affected systems. It affects Chrome versions prior to 148.0.7778.168. The issue was publicly disclosed on May 14, 2026, and Google has released a stable channel update to address it. No detailed CVSS metrics are provided, but the Chromium security team rates it as high severity.

Successful exploitation of this vulnerability could allow remote code execution on the victim's machine, potentially leading to full compromise of the affected system. However, there are no known exploits in the wild currently. The impact is significant given the ability to execute arbitrary code remotely.

Google has released an official stable channel update for Chrome version 148.0.7778.168 that addresses this vulnerability. Users and administrators should update their Chrome installations to this version or later to remediate the issue. Patch status is confirmed by the vendor advisory. No additional mitigation steps are indicated by the vendor.