This vulnerability involves an inappropriate implementation in the input handling of Google Chrome on Android, which enables a remote attacker to conduct UI spoofing by crafting a malicious HTML page. UI spoofing can mislead users by displaying deceptive user interface elements, potentially tricking them into performing unintended actions. The vulnerability is identified as CWE-451. The CVSS vector indicates the attack requires no privileges and user interaction is required. The issue affects Chrome versions before 151.0.7922.72 on Android. The vendor advisory linked does not explicitly confirm a patch or remediation level, but the version 151.0.7922.72 is indicated as the fixed version.

The impact is limited to UI spoofing, which can deceive users into believing they are interacting with legitimate UI elements when they are not. This can lead to user confusion or tricking users into unintended actions. There is no impact on confidentiality or availability. The CVSS score of 4.3 reflects a medium severity level due to the integrity impact and the requirement for user interaction.

The vulnerability is addressed in Google Chrome version 151.0.7922.72. Users and administrators should update to this version or later to remediate the issue. Since this is not a cloud service, remediation depends on applying the update. There is no indication from the vendor advisory that no action is required or that the issue is already mitigated without patching. Patch status is not explicitly confirmed in the advisory, so users should verify the update availability and apply it promptly.