UI Spoofing in Google Chrome UI on Windows

Successful exploitation can enable convincing browser UI spoofing, including fake windows, dialogs, or other interface elements that appear to originate from Chrome. This can be used to bypass user trust assumptions, facilitate credential theft or other social-engineering attacks, and weaken browser security restrictions by making malicious content appear as trusted browser UI. The vulnerability does not by itself indicate arbitrary code execution, but it can materially assist post-compromise exploitation once renderer compromise has been achieved.

Apply the vendor patch as soon as possible. Until patching is complete, reduce exposure by limiting use of untrusted websites and HTML content, enforcing browser sandboxing and exploit mitigations, monitoring for renderer-compromise activity, and educating users to treat unexpected browser dialogs or credential prompts with caution. Because exploitation requires prior renderer compromise, defenses that prevent or detect renderer-level exploitation materially reduce risk.

Upgrade Google Chrome to a fixed version. On Windows, update to Chrome 148.0.7778.179 or later. More broadly, organizations should deploy the vendor security update corresponding to Chrome 148.0.7778.178/179 or later and ensure browsers are restarted so the patched build is active.