An incorrect security UI implementation in the Global Media Controls feature of Google Chrome before version 151.0.7922.72 allows remote attackers to conduct UI spoofing through crafted HTML content. This vulnerability is tracked as CVE-2026-17983 and is associated with CWE-451 (Incorrect Security UI). The CVSS 3.1 base score is 4.3, reflecting a medium severity with no confidentiality or availability impact but with integrity impact due to UI spoofing. The vulnerability requires user interaction and can be exploited remotely without privileges.

The vulnerability enables remote attackers to perform UI spoofing, potentially misleading users into believing they are interacting with legitimate browser UI elements when they are not. This could facilitate social engineering attacks but does not directly compromise confidentiality or availability. There are no reports of active exploitation in the wild.

The vendor has released a stable channel update for Google Chrome as referenced in the advisory (https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html). Although the explicit patch status is not stated in the provided data, the presence of a stable channel update strongly suggests that a fix is available in version 151.0.7922.72. Users and administrators should update to this version or later to mitigate the vulnerability.