This vulnerability involves an incorrect security UI in Google Chrome on iOS prior to version 151.0.7922.72. It allows a remote attacker to craft an HTML page that spoofs the browser's security user interface, potentially misleading users. The flaw is categorized under CWE-451 (Incorrect Expression of User Interface in Security Controls). The CVSS vector indicates the attack requires no privileges and user interaction but can be executed remotely with low complexity. The impact is limited to integrity, with no confidentiality or availability impact.

The vulnerability allows an attacker to perform UI spoofing, which could deceive users into believing they are interacting with a legitimate or secure interface when they are not. This may facilitate phishing or social engineering attacks but does not directly compromise confidentiality or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Users should update to Chrome version 151.0.7922.72 or later once confirmed. Until then, exercise caution when interacting with untrusted web content on affected versions.