This vulnerability affects Google Chrome on iOS before version 150.0.7871.47. The flaw is due to an inappropriate implementation in the browser that enables remote attackers to conduct UI spoofing attacks by crafting malicious HTML pages. UI spoofing can mislead users by presenting deceptive user interface elements, potentially tricking them into unintended actions. The vulnerability is publicly disclosed but no detailed exploitation or CVSS metrics are available. The vendor advisory link is provided but does not explicitly confirm patch availability or remediation status.

The vulnerability allows remote attackers to perform UI spoofing on affected versions of Chrome for iOS. This can lead to user deception, potentially causing users to interact with fraudulent UI elements. There is no indication of further impact such as code execution or data compromise. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Users and administrators should monitor official Google Chrome release notes for updates addressing this issue. Until a patch is confirmed, caution is advised when browsing untrusted sites on affected versions.