This vulnerability arises from an inappropriate implementation in the Permissions component of Google Chrome versions before 149.0.7827.53. It enables a remote attacker to conduct UI spoofing attacks by delivering a specially crafted HTML page. UI spoofing can mislead users by presenting deceptive interface elements, potentially tricking them into unintended actions. The issue is classified as low severity by Chromium security standards. No CVSS score or detailed exploitation information is provided. The vendor advisory URL is available but does not explicitly state patch or mitigation details.

The impact is limited to UI spoofing, which can deceive users by displaying fraudulent interface elements. This could potentially lead to user confusion or trick users into performing unintended actions. There are no reports of active exploitation in the wild. The severity is considered low by the Chromium security team.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Users and administrators should monitor for updates to Google Chrome version 149.0.7827.53 or later that address this issue. Until an official fix is confirmed, exercising caution when interacting with untrusted web content is advised.