This vulnerability in Google Chrome's DevTools affects versions prior to 151.0.7922.72. An attacker with control over the renderer process can exploit an inappropriate implementation to inject malicious scripts or HTML into privileged pages. The issue is classified under CWE-79 (Improper Neutralization of Input During Web Page Generation), indicating a cross-site scripting risk. The CVSS v3.1 base score is 6.1 (medium severity), with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low impact on confidentiality and integrity, and no impact on availability. No known exploits are reported in the wild. The vendor advisory is available but does not explicitly state the remediation level or patch availability in the provided data.

Successful exploitation allows script or HTML injection into privileged pages, potentially leading to limited confidentiality and integrity impacts. The vulnerability requires the attacker to have already compromised the renderer process and user interaction, limiting the attack scope. There is no known exploitation in the wild at this time.

Google has released Chrome version 151.0.7922.72 which addresses this vulnerability. Users and administrators should update to this version or later to mitigate the risk. Patch status is confirmed by the vendor advisory indicating the fix is included in version 151.0.7922.72. No additional mitigation steps are specified by the vendor.