This vulnerability arises from insufficient enforcement of policies within Chrome's DevTools, enabling privilege escalation through a maliciously crafted Chrome extension if a user installs it. The affected versions are prior to 149.0.7827.53. The issue requires user interaction (installing the malicious extension) to be exploited. No known exploits in the wild have been reported. The vendor advisory references a stable channel update but does not explicitly state if this update addresses the vulnerability.

An attacker who successfully convinces a user to install a malicious Chrome extension can escalate privileges within the browser environment, potentially leading to unauthorized actions or access. The impact is limited by the prerequisite of user installation of the malicious extension. No evidence of active exploitation is reported.

The vendor advisory linked points to a stable channel update for Chrome but does not explicitly confirm a fix for this vulnerability. Users should update to Chrome version 149.0.7827.53 or later to ensure they have the latest security patches. Until confirmation is obtained from the vendor advisory, patch status is not yet confirmed—check the vendor advisory for current remediation guidance. Users should also exercise caution when installing Chrome extensions, only installing those from trusted sources.