This vulnerability is a race condition (CWE-362) in Google Chrome on iOS before version 151.0.7922.72. It enables a remote attacker to conduct UI spoofing attacks by leveraging a crafted HTML page, potentially misleading users about the interface they are interacting with. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact.

The primary impact is UI spoofing, which can deceive users into believing they are interacting with legitimate UI elements, potentially leading to phishing or other social engineering attacks. There is no direct confidentiality or availability impact reported. The integrity impact is rated high, reflecting the potential for misleading or manipulating user interface elements.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The linked Google Chrome release blog post does not explicitly state that this issue is fixed in version 151.0.7922.72 or later. Users should monitor official Google Chrome release notes for updates and apply updates promptly once a fix is confirmed.