This vulnerability involves an incorrect security user interface in the Extensions component of Google Chrome on Android devices before version 150.0.7871.47. A remote attacker can exploit this by tricking a user into performing certain UI gestures on a maliciously crafted HTML page, resulting in UI spoofing. This could mislead users about the authenticity or security state of the browser interface. The issue is recognized as medium severity by Chromium security. There is no explicit remediation level or patch link provided in the input, but the affected versions are those prior to 150.0.7871.47.

The impact of this vulnerability is UI spoofing, which can deceive users into believing they are interacting with legitimate browser UI elements when they are not. This may lead to users inadvertently disclosing sensitive information or performing unintended actions. However, there is no indication of direct code execution or privilege escalation. No known exploits in the wild have been reported.

A fix is available in Google Chrome version 150.0.7871.47. Users and administrators should update affected Chrome installations on Android to this version or later to remediate the vulnerability. Since this is not a cloud service, remediation depends on applying the update. Check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for the latest status and update instructions. Patch status is not explicitly confirmed in the advisory content provided, so verify current remediation guidance from Google.