This vulnerability in Google Chrome's extension policy allows an attacker who persuades a user to install a crafted malicious extension to bypass the browser's site isolation feature. Site isolation is a security mechanism designed to separate different websites into different processes to prevent data leaks and attacks across sites. The issue affects Chrome versions before 151.0.7922.72. No CVSS score is provided, but the Chromium security team rates it as medium severity.

An attacker can bypass site isolation by exploiting this vulnerability through a malicious extension installed by the user. This could potentially allow cross-site data access or compromise browser security boundaries. However, exploitation requires user interaction (installing the malicious extension). There are no known exploits in the wild at the time of disclosure.

A fix is available in Google Chrome version 151.0.7922.72. Users and administrators should update to this version or later to remediate the vulnerability. The vendor advisory linked provides official update information. No additional mitigation steps are specified.