This vulnerability arises from an inappropriate implementation in the HTMLParser of Google Chrome versions before 150.0.7871.47. It enables remote attackers to inject arbitrary scripts or HTML content through a crafted HTML page, leading to a UXSS vulnerability. The issue is classified under CWE-79 (Improper Neutralization of Input During Web Page Generation). The CVSS vector indicates the attack requires no privileges but does require user interaction, with network attack vector and low complexity. The vulnerability impacts confidentiality and integrity but not availability. No known exploits in the wild have been reported. The vendor advisory is available but does not explicitly state the patch status or remediation level.

Successful exploitation allows remote attackers to inject arbitrary scripts or HTML into the browser context, potentially leading to unauthorized actions or data exposure within the affected user's browsing session. The impact affects confidentiality and integrity to a limited extent, with no impact on availability. The vulnerability requires user interaction and can be triggered remotely over the network.

The vulnerability affects Google Chrome versions prior to 150.0.7871.47. Users and administrators should update to version 150.0.7871.47 or later to remediate this issue. The vendor advisory linked does not explicitly confirm patch status, but the version number indicates the fix is included in 150.0.7871.47. Patch status is not yet confirmed explicitly in the advisory; therefore, verify the vendor advisory for the latest remediation guidance.