This vulnerability involves an inappropriate implementation in the DevTools component of Google Chrome before version 151.0.7922.72. It enables a remote attacker to bypass the same origin policy by using a specially crafted HTML page. The same origin policy is a critical security mechanism that restricts how documents or scripts loaded from one origin can interact with resources from another origin. Bypassing this policy can lead to unauthorized integrity modifications. The CVSS v3.1 base score is 6.5, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The vulnerability is tracked as CWE-346 (Origin Validation Error).

The vulnerability allows a remote attacker to bypass the same origin policy, potentially enabling unauthorized modification of data or actions within the browser context. This impacts the integrity of web content or browser behavior. There is no indication of confidentiality or availability impact. No known active exploitation has been reported.

Google has released Chrome version 151.0.7922.72 which addresses this vulnerability. Users and administrators should update to this version or later to mitigate the risk. Patch status is not explicitly stated in the advisory, but the fixed version is identified. No additional mitigation steps are indicated by the vendor advisory.