This vulnerability in Google Chrome for iOS (prior to version 151.0.7922.72) is caused by an inappropriate implementation that enables remote attackers to conduct UI spoofing through crafted HTML content. The issue is tracked as CWE-451 (User Interface Misrepresentation). The CVSS v3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The vendor has published an advisory but has not explicitly confirmed a patch or remediation level.

The vulnerability allows remote attackers to spoof the user interface in Google Chrome for iOS, potentially misleading users into believing they are interacting with legitimate UI elements. This can lead to deception but does not compromise confidentiality or availability. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Until official confirmation of a fix is available, users should exercise caution when interacting with untrusted web content on affected versions.