An inappropriate implementation of SVG in Google Chrome prior to version 150.0.7871.47 (CWE‑451) allows a remote attacker to create a crafted HTML page that causes the browser to render user interface elements that closely mimic native Chrome dialogs or controls. The deception is limited to the browser’s UI layer; based on the description, it is inferred that no direct code execution or data exfiltration is achieved by the flaw itself.

Affected systems are Google Chrome desktop clients on Windows, macOS, and Linux running a stable‑channel build earlier than 150.0.7871.47; the inference about supported operating systems is based on typical Chrome deployment and is not explicitly stated in the CVE description.

The CVSS score of 4.3 indicates a medium severity rating, and the EPSS score of <1% shows a low probability of exploitation. The flaw is not listed in CISA’s KEV catalog. Based on the description, it is inferred that exploitation requires only that a victim load a crafted web page in the browser, with no elevated privileges or additional conditions needed. While the impact is confined to UI deception, it is inferred that the vulnerability could enable social engineering attacks driven by the misleading interface.