This vulnerability in Google Chrome's Passwords feature arises from improper validation of untrusted input, enabling a remote attacker with control over the renderer process to potentially perform a sandbox escape through a specially crafted HTML page. The issue affects Chrome versions before 151.0.7922.72. The CVSS 3.1 base score is 9.6 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope change, and high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported. The vendor has published an advisory linked to a stable channel update but has not explicitly stated the remediation level or patch availability in the provided data.

Successful exploitation could allow an attacker who has compromised the renderer process to escape the sandbox, potentially leading to full system compromise with high impact on confidentiality, integrity, and availability of the affected system. This elevates the risk of remote code execution beyond the browser sandbox.

The vendor has published a stable channel update for desktop Chrome, indicating that a fix is available in version 151.0.7922.72. Users and administrators should update to this version or later to remediate the vulnerability. Patch status is not explicitly confirmed in the advisory content provided, so verifying the update and patch details on the official Google Chrome release blog is recommended.