This vulnerability involves an incorrect security UI in Google Chrome's Permissions interface on Windows platforms before version 147.0.7727.55. The flaw enables a remote attacker to craft an HTML page that can spoof domain information, potentially misleading users about the origin of content or permissions. The CVSS 3.1 vector indicates the attack requires no privileges, has low complexity, requires user interaction, and impacts integrity but not confidentiality or availability. No official remediation level or patch is explicitly stated in the provided data, but a vendor advisory URL is available for further details.

The vulnerability allows a remote attacker to perform domain spoofing, which can mislead users about the legitimacy of a website or permissions requested. This could lead to users granting permissions or interacting with malicious content under false pretenses. The impact affects integrity but not confidentiality or availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop.html for current remediation guidance. Users should update Google Chrome to version 147.0.7727.55 or later when available to address this issue.