This vulnerability in Google Chrome arises from insufficient validation of untrusted input within the Passwords feature. An attacker who has already compromised the renderer process can exploit this flaw to conduct UI spoofing attacks by crafting malicious HTML pages. The CVSS score is 6.5 (medium severity) with an attack vector of network, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The issue affects Chrome versions prior to 151.0.7922.72.

The vulnerability allows an attacker with control over the renderer process to perform UI spoofing, potentially misleading users by displaying fraudulent user interface elements. There is no direct confidentiality or availability impact. The integrity of the user interface can be compromised, which may facilitate phishing or social engineering attacks.

A fix is available in Google Chrome version 151.0.7922.72. Users and administrators should update to this version or later to remediate the vulnerability. The vendor advisory linked provides official confirmation of the update. No additional mitigation steps are specified or required beyond applying the update.