This vulnerability is a race condition (CWE-362) in Google Chrome on iOS before version 151.0.7922.72. The flaw allows a remote attacker to craft an HTML page that exploits the race condition to perform UI spoofing, potentially deceiving users by displaying misleading interface elements. The CVSS v3.1 base score is 6.5 (medium), with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. No known exploits in the wild have been reported. The vendor advisory linked does not explicitly state remediation details or patch availability.

The vulnerability enables a remote attacker to perform UI spoofing on affected versions of Chrome for iOS, potentially tricking users into believing malicious content is legitimate. There is no direct confidentiality or availability impact. The integrity of the user interface can be compromised, which may facilitate phishing or social engineering attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The linked Google Chrome release blog post should be monitored for updates regarding fixes. Until a patch is confirmed, users should exercise caution when browsing untrusted sites on affected Chrome for iOS versions.