Based on the description, it is inferred that a remote attacker can manipulate the contents shown in the Chrome for iOS address bar by sending specially crafted network traffic. This allows the attacker to display misleading or falsified URLs to a user, potentially leading to phishing or other deceptive attacks. The main consequence is the compromise of user trust and the potential for accidental navigation to malicious sites.

Chrome for iOS versions earlier than 151.0.7922.72 are affected. All iOS devices running these versions of Chrome can be impacted by this flaw.

The problem is rated as a medium‑severity issue by Chromium security, but its EPSS score is less than 1%, indicating a low probability of exploitation in the wild. The vulnerability is not listed in CISA’s KEV catalog. Based on the description, it is inferred that an attacker would need to deliver the malicious traffic over the network without any local interactions, implying the attack can be performed remotely from a position that can influence network traffic to the victim’s device.