This vulnerability in Google Chrome's XML implementation allows remote attackers to perform UXSS attacks by injecting arbitrary scripts or HTML through crafted HTML pages. It affects versions of Chrome prior to 149.0.7827.53. The CVSS v3.1 base score is 6.1, indicating a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality and integrity, with no impact on availability. There is no explicit vendor advisory stating a patch or remediation level, but the affected versions indicate the issue is fixed in 149.0.7827.53.

Exploitation of this vulnerability could allow an attacker to execute arbitrary scripts or inject HTML content in the context of the victim's browser, potentially leading to information disclosure or manipulation of web content. The impact is limited to confidentiality and integrity with no availability impact. No known exploits in the wild have been reported.

The vulnerability is fixed in Google Chrome version 149.0.7827.53. Users and administrators should update to this version or later to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.