The flaw is a UI misrepresentation in the PageInfo component of Google Chrome. A remote attacker can deliver a specially crafted HTML page that causes Chrome to display spoofed UI elements, such as fake dialogs or prompts. This creates a surface for social engineering and phishing attacks by tricking users into interacting with counterfeit user interface components. The weakness is classified as CWE-451, indicating improper handling of user interface elements.

Google Chrome users running versions prior to 157.0.8103.38 on any platform—including Windows, macOS, and Linux—are affected. The vulnerability resides in the PageInfo component of the Chromium browser.

The likely attack vector involves a malicious webpage that, when visited, forces Chrome to render spoofed UI elements; no additional credentials or privileges are required. The CVSS assessment labels the issue as Low severity. The EPSS score is unavailable and the vulnerability is not listed in CISA KEV, suggesting limited exploitation evidence. Nonetheless, susceptible browsers remain vulnerable to social engineering attacks that can lead to phishing or credential theft. Chrome’s Safe Browsing and anti‑phishing features, increased user awareness, and timely patching reduce the likelihood of successful exploitation.