This vulnerability in Google Chrome's UI implementation allows remote attackers to conduct UI spoofing attacks by tricking users into specific UI gestures on maliciously crafted web pages. The issue affects versions prior to 150.0.7871.47. The CVSS score is 4.2 (medium severity), with attack vector network, high attack complexity, no privileges required, user interaction required, and impacts on integrity and availability but not confidentiality. The vendor advisory link is provided but does not explicitly state if the issue is fixed in the referenced version or later.

The vulnerability enables UI spoofing, which can mislead users into believing they are interacting with legitimate UI elements, potentially causing them to perform unintended actions. The impact is limited to integrity and availability with no confidentiality loss. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Users and administrators should monitor official Google Chrome release notes and update to version 150.0.7871.47 or later once confirmed fixed.