This vulnerability concerns an incorrect security UI in Google Chrome's Permissions interface on Windows platforms before version 147.0.7727.55. The flaw enables a remote attacker to craft an HTML page that can spoof domain information, potentially misleading users about the origin of content or permissions. The issue is classified by Chromium as low severity, indicating limited impact or exploitability. No CVSS score or detailed technical exploit information is provided. The vendor advisory link is available but does not explicitly state patch or remediation details.

The impact is limited to domain spoofing via the Permissions UI in affected Chrome versions on Windows. This could potentially deceive users about the legitimacy of a domain requesting permissions, but the overall security severity is low. There are no reports of exploitation in the wild, and the vulnerability does not appear to allow direct code execution or privilege escalation.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for current remediation guidance. Since the affected version is prior to 147.0.7727.55, updating Chrome to version 147.0.7727.55 or later is recommended if the vendor advisory confirms a fix. No other specific mitigation steps are indicated by the vendor advisory or CVE description.