This vulnerability arises from improper validation of untrusted input within Chrome Extensions before version 150.0.7871.47. An attacker can exploit this by tricking a user into installing a malicious extension, which then can perform user interface spoofing. This could mislead users by displaying deceptive UI elements. The issue is specific to Chrome desktop versions prior to 150.0.7871.47. There is no explicit patch or remediation level stated in the provided data, but a vendor advisory URL is available for further details.

The impact is limited to UI spoofing, which can deceive users into believing they are interacting with legitimate browser elements or websites. This may facilitate phishing or social engineering attacks but does not indicate direct code execution or data theft from the vulnerability description. The severity is medium, reflecting moderate risk due to the requirement of user interaction (installing a malicious extension).

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Users should avoid installing untrusted or suspicious Chrome extensions to mitigate risk until an official fix is confirmed.