This vulnerability involves an incorrect security user interface in the Autofill feature of Google Chrome on Windows versions before 150.0.7871.47. An attacker who convinces a user to engage in certain UI gestures on a maliciously crafted HTML page can exploit this flaw to spoof the UI. The issue is tracked as CWE-451 (Incorrect Expression of Security Controls). The CVSS 3.1 base score is 4.2, reflecting a network attack vector with high attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact.

The vulnerability allows remote attackers to perform UI spoofing, potentially misleading users about the authenticity or security state of the Autofill interface. This could lead to user confusion or trick users into unsafe actions. There is no direct confidentiality impact, but integrity and availability impacts are low. No known exploits are reported in the wild.

Google has released Chrome version 150.0.7871.47 which addresses this issue. Users and administrators should update to this version or later to remediate the vulnerability. Patch status is not explicitly confirmed in the advisory, but the presence of the fixed version indicates a fix is available. No additional mitigations are specified by the vendor.