This vulnerability involves an inappropriate implementation in the Autofill functionality of Google Chrome versions before 151.0.7922.72. It permits a remote attacker to perform UXSS (Universal Cross-Site Scripting) by injecting arbitrary scripts or HTML through a specially crafted HTML page. The CVSS v3.1 base score is 5.4, indicating medium severity, with an attack vector of network, low attack complexity, no privileges required, user interaction required, and impacts confidentiality and integrity with no impact on availability. There is no explicit vendor advisory stating the patch status, but the affected version is prior to 151.0.7922.72, implying that updating to this version or later mitigates the issue.

Successful exploitation could allow an attacker to execute arbitrary scripts or inject HTML content in the context of the victim's browser, potentially leading to information disclosure or manipulation of web content. The impact is limited to confidentiality and integrity with no availability impact. No known exploits are reported in the wild.

Users and administrators should update Google Chrome to version 151.0.7922.72 or later to remediate this vulnerability. The vendor advisory linked indicates this is the fixed version. No additional mitigation steps are indicated.