This vulnerability in Google Chrome on iOS prior to version 151.0.7922.72 involves an incorrect security UI that can be exploited by a remote attacker to perform domain spoofing through a crafted HTML page. Domain spoofing may mislead users about the authenticity of a website, potentially facilitating phishing or other social engineering attacks. The issue is specific to the iOS platform of Chrome and was publicly disclosed with a medium severity rating. No detailed CVSS score or explicit remediation level is provided in the available data. The vendor advisory link is provided but does not explicitly state patch availability or mitigation instructions.

The vulnerability allows remote attackers to spoof domains by exploiting incorrect security UI in Chrome for iOS, potentially deceiving users about the legitimacy of websites they visit. This can lead to phishing attacks or other forms of user deception. There is no evidence of known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Until official fixes are confirmed, users should exercise caution when interacting with suspicious links or websites on Chrome for iOS.