This vulnerability in Google Chrome's Geometry implementation allows remote attackers to conduct UI spoofing attacks by tricking users into performing specific UI gestures on maliciously crafted web pages. The flaw affects versions prior to 150.0.7871.47. The CVSS 3.1 base score is 4.2 (medium), reflecting network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact. The vulnerability is tracked as CWE-451 (Incorrect Expression).

An attacker can perform UI spoofing, potentially misleading users about the authenticity or state of the browser interface. This could lead to users being tricked into performing unintended actions. The impact on confidentiality is none, with low impact on integrity and availability. No known active exploitation has been reported.

Google has released Chrome version 150.0.7871.47 to address this issue. Users and administrators should update to this version or later to mitigate the vulnerability. Patch status is not explicitly confirmed in the advisory link provided, so verify the vendor advisory for the latest remediation details.