This vulnerability arises from insufficient validation of untrusted input within Chrome Extensions in versions prior to 151.0.7922.72. An attacker who has already compromised the renderer process could exploit this flaw by crafting a malicious HTML page to perform a sandbox escape, potentially increasing their privileges or access beyond the renderer sandbox. The issue is rated medium severity by Chromium security and has a CVSS v3.1 score of 5.8, reflecting network attack vector, high attack complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality, integrity, and availability.

If exploited, this vulnerability could allow an attacker with control over the renderer process to escape the sandbox environment, potentially leading to increased access or privilege escalation on the affected system. The impact is limited to scenarios where the renderer process is already compromised and requires user interaction to trigger the exploit. The confidentiality, integrity, and availability impacts are rated low.

A fixed version of Google Chrome is available at 151.0.7922.72. Users and administrators should update to this version or later to remediate the vulnerability. No additional mitigation guidance is provided by the vendor advisory. Patch status is confirmed by the vendor advisory linked.