This vulnerability in Google Chrome's Downloads feature allows remote attackers to conduct UI spoofing by exploiting an inappropriate implementation. The issue affects all Chrome versions before 149.0.7827.53. The CVSS score is 4.3 (medium severity), indicating low complexity and no privileges required for exploitation, but user interaction is necessary. The vulnerability does not affect confidentiality or availability but impacts integrity by misleading users through spoofed UI elements. There are no known exploits in the wild. The vendor advisory linked corresponds to the stable channel update that presumably addresses this issue, but explicit patch status is not confirmed in the advisory.

The vulnerability enables remote attackers to perform UI spoofing, potentially misleading users into interacting with deceptive interface elements. This can lead to user confusion or trick users into unintended actions. There is no direct impact on data confidentiality or system availability.

A fix is available in Google Chrome version 149.0.7827.53. Users and administrators should update to this version or later to remediate the vulnerability. The vendor advisory linked provides the stable channel update details. No additional mitigation steps are indicated.