This vulnerability (CVE-2026-17819) affects Google Chrome versions prior to 151.0.7922.72. It is caused by an inappropriate implementation in the WebAppInstalls feature, which enables a remote attacker to conduct UI spoofing attacks by crafting malicious HTML pages. The issue is classified under CWE-451 (Incorrect Expression of User Interface Element). The CVSS v3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The vendor advisory URL is provided, but no explicit patch or remediation status is confirmed in the input data.

The vulnerability allows remote attackers to perform UI spoofing, potentially misleading users by displaying deceptive interface elements. This can lead to integrity issues, such as tricking users into performing unintended actions. There is no impact on confidentiality or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Users and administrators should monitor official Google Chrome release notes and apply updates promptly once a fix is confirmed available.