This vulnerability in Google Chrome's Paint component allows remote attackers to conduct UI spoofing by crafting malicious HTML pages. The issue affects Chrome versions before 150.0.7871.47. UI spoofing can trick users into interacting with deceptive interface elements, potentially leading to phishing or other social engineering attacks. The vulnerability is classified as medium severity by Chromium security. No CVSS score is provided. The vendor advisory link is available but does not explicitly confirm patch availability or remediation details.

The impact is limited to UI spoofing, which can deceive users into believing they are interacting with legitimate browser or website elements. This can facilitate phishing or social engineering attacks but does not directly lead to code execution or data compromise based on the provided information. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Users and administrators should update to Chrome version 150.0.7871.47 or later once confirmed. Until then, be cautious of suspicious web content that may attempt UI spoofing.