This vulnerability involves script injection via a crafted malicious Chrome extension exploiting the Accessibility feature in Chrome versions before 149.0.7827.53. An attacker must convince a user to install the malicious extension, which then can inject arbitrary scripts or HTML, leading to UXSS. The vulnerability is publicly disclosed with medium severity but lacks a CVSS score and explicit remediation details in the provided data. A vendor advisory URL points to a stable channel update, implying a fix may be included in or after version 149.0.7827.53.

Successful exploitation allows an attacker to inject arbitrary scripts or HTML in the context of the browser via a malicious extension, potentially leading to UXSS attacks. This could enable unauthorized script execution and compromise user interactions with web content. However, exploitation requires user interaction to install the malicious extension. No known exploits in the wild have been reported.

The vendor advisory linked suggests that a stable channel update for Chrome is available; users should update to version 149.0.7827.53 or later to remediate this vulnerability. Since the vulnerability requires installation of a malicious extension, users should avoid installing untrusted extensions. Patch status is not explicitly confirmed in the advisory content provided, so users should verify the update details in the vendor advisory to ensure remediation.