This vulnerability arises from insufficient enforcement of extension policies in Google Chrome versions before 150.0.7871.47. An attacker can exploit this by tricking a user into installing a malicious extension, which then can perform user interface spoofing. This could potentially mislead users by presenting deceptive UI elements within the browser. The issue is acknowledged and published with a medium severity rating, but no detailed remediation level or patch information is explicitly stated in the input data. The vendor advisory URL is provided but does not contain patch status in the given content.

The impact is limited to UI spoofing via malicious extensions installed by user consent. This could lead to user deception but does not indicate direct code execution or privilege escalation. No known exploits in the wild have been reported. The medium severity reflects a moderate risk primarily dependent on social engineering to install the malicious extension.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Users should avoid installing untrusted extensions and verify extension sources. Until official fixes are confirmed, cautious extension management is recommended.