This vulnerability in Google Chrome on Android versions before 151.0.7922.72 is due to an incorrect security UI implementation that can be exploited by a remote attacker to conduct domain spoofing through a specially crafted HTML page. The flaw does not impact confidentiality or availability but can mislead users about the authenticity of a website, potentially facilitating phishing or other social engineering attacks. The CVSS score is 4.3, reflecting a medium severity level. There is no explicit vendor advisory confirming a patch or remediation level, but the affected versions are those prior to 151.0.7922.72.

The vulnerability allows a remote attacker to perform domain spoofing by exploiting an incorrect security UI in Chrome on Android. This can lead to user deception but does not directly compromise confidentiality or availability. No known active exploitation has been reported.

A fix is available in Google Chrome version 151.0.7922.72. Users and administrators should update to this version or later to remediate the vulnerability. There is no indication from the vendor advisory that no action is required or that the issue is already mitigated without patching.