This vulnerability arises from insufficient enforcement of extension policies in Google Chrome versions before 149.0.7827.53. An attacker can exploit this by tricking a user into installing a crafted malicious extension, which then can inject scripts or HTML into privileged browser pages. This could potentially lead to unauthorized actions or information disclosure within the browser context. The issue is classified as medium severity by Chromium security. The vendor has released a stable update that includes a fix for this vulnerability.

If exploited, this vulnerability allows a malicious Chrome extension to inject scripts or HTML into privileged pages, potentially enabling unauthorized manipulation of browser content or behavior. This could compromise user security and privacy by bypassing intended extension policy restrictions. However, exploitation requires user interaction to install the malicious extension. There are no known exploits in the wild at this time.

Users and administrators should update Google Chrome to version 149.0.7827.53 or later, where this vulnerability is fixed. The vendor advisory confirms that a stable channel update addresses this issue. No additional mitigation steps are indicated beyond applying the official update.