This vulnerability arises from an inappropriate implementation in the DevTools component of Google Chrome before version 151.0.7922.72. An attacker with control over the renderer process can exploit this flaw by crafting a malicious HTML page that injects scripts or HTML into a privileged page, potentially escalating privileges or executing unauthorized code. The issue is specific to the DevTools environment and requires prior compromise of the renderer process. The vendor has published an advisory linked to the stable channel update for desktop Chrome, indicating the fixed version is 151.0.7922.72.

The impact is limited to scenarios where an attacker has already compromised the renderer process, enabling them to inject code into privileged pages via DevTools. This could facilitate privilege escalation or unauthorized script execution within the browser's privileged context. The severity is assessed as medium by Chromium security.

Users should update Google Chrome to version 151.0.7922.72 or later to remediate this vulnerability. The vendor advisory confirms that this version contains the fix. No additional mitigation steps are indicated by the vendor.