This vulnerability arises from insufficient policy enforcement in Chrome Extensions in versions before 151.0.7922.72. An attacker can exploit this by tricking a user into installing a crafted malicious extension, which then can inject arbitrary scripts or HTML into the browser context, resulting in a UXSS vulnerability. The CVSS score is 4.2 (medium severity), reflecting limited impact with requirements for user interaction and high attack complexity.

Successful exploitation allows an attacker to inject arbitrary scripts or HTML via a malicious Chrome Extension, potentially leading to UXSS attacks. This can compromise the confidentiality and integrity of data accessible through the browser. However, exploitation requires user interaction (installing the malicious extension) and has high attack complexity, limiting widespread impact.

Users and administrators should update Google Chrome to version 151.0.7922.72 or later, where this vulnerability is addressed. The vendor advisory linked confirms the availability of this update. No additional mitigations are specified.