A flaw in the DigitalCredentials component of Google Chrome allowed a remote attacker to craft an HTML page that could spoof the user interface. The inappropriate implementation enabled the attacker to display misleading UI elements, potentially tricking users into interacting with malicious content. The vulnerability is a classic example of a client‑side UI spoofing flaw (CWE‑79).

Based on the description, it is inferred that the flaw affects Google Chrome on all major operating systems. All users running Chrome versions prior to 151.0.7922.72 are potentially vulnerable, regardless of platform. No specific version ranges beyond the stated update are listed, so all earlier releases are assumed affected.

The CVSS score of 5.4 indicates a medium severity vulnerability. The EPSS score is reported as less than 1 %, implying a very low expected exploitation probability, and the flaw is not currently listed in CISA KEV. The likely attack vector is a remote attacker serving a crafted HTML page to a victim’s browser; no local privilege escalation is required. As the flaw operates purely on the UI layer, the exploitation conditions are limited to web‑based interactions and do not require additional user credentials.