The vulnerability identified as CVE-2026-87567 affects Google Chrome's UrlFormatting prior to version 153.0.8010.36. It allows a remote attacker to create a crafted domain name that causes the browser's address bar to display misleading information, effectively spoofing the URL. This UI misrepresentation can be leveraged via social engineering to trick users into believing they are visiting a legitimate site when they are not. The issue is categorized under CWE-451 (User Interface Misrepresentation). There is no public information about exploits in the wild or official patches at this time.

An attacker exploiting this vulnerability could deceive users by displaying a spoofed URL in the browser's address bar, potentially leading to phishing or other social engineering attacks. This could result in users divulging sensitive information or performing actions under false pretenses. However, the impact is limited to UI deception and does not indicate direct code execution or system compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chrome security advisories for updates and apply any forthcoming patches promptly. Until a fix is available, caution is advised when clicking on suspicious links or domains that could exploit this UI misrepresentation.