This vulnerability concerns an incorrect security UI in the SplitView feature of Google Chrome versions before 150.0.7871.47. An attacker can exploit this by tricking a user into engaging in certain UI gestures on a maliciously crafted HTML page, resulting in UI spoofing. The issue is classified as low severity by Chromium security. There is no CVSS score available, and no explicit remediation level or patch confirmation is provided in the vendor advisory link.

The impact is limited to UI spoofing, which may mislead users about the authenticity or security state of the browser interface. This could potentially facilitate phishing or social engineering attacks but does not directly lead to code execution or data compromise. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for current remediation guidance. Users should update to Chrome version 150.0.7871.47 or later once confirmed. Until then, exercising caution with untrusted web content and avoiding unusual UI gestures on suspicious pages may reduce risk.