CVE-2008-6996: Google Chrome

Medium severity, CVSS 5.0. EPSS: 6.4% chance of exploitation in the next 30 days.

Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service (disk consumption) or exploit other vulnerabilities via a URL that references an executable file, possibly related to the "ask where to save each file before downloading" setting.

Affected products

• Google Chrome: version 0.2.149.27 only

Published 2009-08-19. Last modified 2026-06-16.