This vulnerability involves an inappropriate implementation in Google Chrome for iOS before version 151.0.7922.72, which allows a remote attacker to spoof the Omnibox (URL bar) contents by using a crafted HTML page. The flaw could cause the browser to display a misleading URL, potentially deceiving users about the legitimacy of the website they are visiting. The issue is rated as low severity by the Chromium security team. No CVSS score is provided. The vendor advisory is available but does not explicitly state the patch or remediation status. The affected version is exactly 151.0.7922.72, implying that versions prior to this are vulnerable.

The impact is limited to the ability of a remote attacker to spoof the URL bar in Chrome for iOS, potentially misleading users about the website they are visiting. This could facilitate phishing or social engineering attacks but does not indicate direct code execution or data compromise. The severity is low, reflecting limited risk.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Users and administrators should update Chrome for iOS to version 151.0.7922.72 or later once available to mitigate this vulnerability. No other specific mitigations are provided by the vendor advisory.