This vulnerability in Google Chrome for iOS before version 151.0.7922.72 is due to an incorrect security UI implementation that allows remote attackers to spoof domains using crafted HTML content. The issue is tracked as CWE-451 (Incorrect Expression of Security Controls). The CVSS v3.1 base score is 6.5 (medium), with attack vector network, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. There is no explicit vendor advisory stating a patch or remediation level, but the affected versions are those prior to 151.0.7922.72, implying that updating to 151.0.7922.72 or later mitigates the issue.

The vulnerability allows remote attackers to perform domain spoofing on Chrome for iOS, potentially misleading users into trusting malicious websites. This impacts the integrity of the browser's security UI but does not affect confidentiality or availability. There are no known exploits in the wild at this time.

Users and administrators should update Google Chrome for iOS to version 151.0.7922.72 or later to remediate this vulnerability. No additional mitigation guidance or temporary fixes are provided by the vendor. Patch status is not explicitly confirmed in the vendor advisory, but the version information indicates that the issue is fixed in 151.0.7922.72.