This vulnerability involves an incorrect security UI display in fullscreen mode in Google Chrome versions before 147.0.7727.55. It enables remote attackers to spoof the browser's user interface via a specially crafted HTML page, potentially misleading users about the security state of the browser. The issue is categorized as medium severity by Chromium security. No CVSS score or detailed remediation information is provided in the input data. The vendor advisory URL points to a Chrome stable channel update announcement but does not explicitly confirm a fix for this vulnerability within the provided content.

The impact of this vulnerability is UI spoofing in fullscreen mode, which could deceive users into trusting malicious content by presenting a falsified security interface. This may lead to user confusion or facilitate social engineering attacks. There are no reports of active exploitation in the wild. The severity is medium as per Chromium security classification.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for current remediation guidance. Until official confirmation of a fix is available, users should exercise caution when interacting with fullscreen content in Chrome and avoid untrusted web pages that could exploit UI spoofing. No vendor advisory states that no action is required or that the issue is already mitigated.