Google Chrome versions prior to 152.0.7977.75 contain improper privilege management in the Downloads component. The flaw allows a remote attacker who has gained control of the renderer process to present a forged address bar using a specially crafted HTML page. The attacker can therefore deceive users into believing they are visiting a legitimate site, potentially leading to credential theft or delivery of malicious content. The vulnerability is rated Medium severity by Chromium’s security team.

All platforms running Google Chrome before build 152.0.7977.75 are affected, including Windows, macOS and Linux distributions. The flaw is tied to the Downloads module and applies to any installation of the browser that has not been updated to 152.0.7977.75 or later.

Because the exploitation requires an attacker to already compromise the renderer process, the likelihood of a successful attack is moderate and limited to environments where such a compromise is feasible. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, indicating no known widespread exploitation at this time. The primary attack vector is a crafted HTML page served to the victim; the attacker could therefore launch phishing and download‑based attacks through otherwise trusted web content.