This vulnerability involves an incorrect security UI implementation in the Select component of Google Chrome on Mac platforms. It enables a remote attacker to craft an HTML page that can spoof the Omnibox contents, potentially misleading users about the actual URL they are visiting. The issue affects Chrome versions before 150.0.7871.47. The Chromium security team rates this vulnerability as low severity. There is no CVSS score provided. The vendor has published an advisory but has not explicitly stated the remediation level or patch availability in the provided data.

The impact is limited to UI spoofing of the Omnibox, which could deceive users into believing they are on a legitimate site when they are not. This could facilitate phishing or social engineering attacks but does not indicate direct code execution or data compromise. The severity is low, reflecting limited risk.

A fix is available in Google Chrome version 150.0.7871.47. Users should update to this version or later to remediate the vulnerability. Since this is not a cloud service, remediation requires updating the client software. Check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html for confirmation and further details.