UI misrepresentation in Chrome interstitials permits a remote attacker to craft an HTML page that emulates legitimate browser UI elements. This flaw is categorized as CWE‑451, indicating deceptive presentation of user interface components. The attacker can cause users to misinterpret pop‑up warnings or messages, leading them to interact with malicious content. Based on the description, it is inferred that the deception may be leveraged for phishing or social‑engineering tricks, although the vulnerability itself does not provide direct credential theft capability.

The vulnerability affects Google Chrome builds older than version 156.0.8078.47 on all platforms receiving the stable channel release. Users operating any prior stable build are potentially exposed until they upgrade to a patched version.

With a CVSS score of 8.8 the issue is high‑severity. The EPSS score is below 1 %, and the vulnerability is not listed in CISA’s KEV catalog, indicating no confirmed large‑scale exploitation. The attack vector is a remote crafted HTML page; the flaw does not require elevated privileges or local execution. Consequently, any user who visits malicious content could be impacted.