This vulnerability involves an incorrect security UI in Google Chrome on iOS platforms before version 150.0.7871.47. Specifically, the Omnibox (URL bar) can be spoofed by a remote attacker using a crafted HTML page, which may deceive users about the true destination URL. The issue is tracked as CWE-451 (Incorrect Expression of Security Controls). The CVSS 3.1 vector indicates a network attack vector with low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and no availability impact. The vulnerability was publicly disclosed and patched by Google in the referenced Chrome stable channel update.

The vulnerability allows remote attackers to spoof the URL bar in Chrome for iOS, potentially misleading users to believe they are visiting a legitimate site when they are not. This could facilitate phishing or social engineering attacks. However, the impact is limited to integrity (spoofing) without direct confidentiality or availability consequences. No known exploitation in the wild has been reported.

Users should update Google Chrome for iOS to version 150.0.7871.47 or later to remediate this vulnerability. The vendor advisory indicates the issue is fixed in this version. No additional mitigations are specified or required once updated.