VULNERABILITY DETAILS
This vulnerability enables us to craft a link which downloads a potentially malicious file without user confirmation.

VERSION
Chrome Version 50.0.2661.102 (64-bit)
Operating System: OS X El Capitan 10.11.5

REPRODUCTION CASE
Step 1:
Copy the share link of the malicious file from Google Drive. Example:
https://drive.google.com/open?id=0ByB8ANAP9wwnYWtyREg0ZmtUd1E

Step 2: Change the "open" parameter with "uc". The resulting link is as follows
https://drive.google.com/uc?id=0ByB8ANAP9wwnYWtyREg0ZmtUd1E

Step 3: Send this link to anyone, if the victim uses Chrome and clicks on the link, the malicious file gets downloaded without his confirmation. Notice that I used a simple JS file but it could be an arbitrary executable.

Alternative link:
https://drive.google.com/uc?export=download&id=0ByB8ANAP9wwnYWtyREg0ZmtUd1E

This link represents the same problem with some additional parameters which may or may not have additional security implications in the implementation.