This vulnerability involves a use-after-free condition in the DevTools of Google Chrome before version 151.0.7922.72. Exploitation requires user interaction, specifically convincing the user to install a crafted malicious Chrome extension. Successful exploitation can lead to arbitrary code execution inside the sandboxed environment of Chrome, potentially compromising confidentiality, integrity, and availability of the affected system. The CVSS vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

An attacker can execute arbitrary code inside the sandbox of Google Chrome by exploiting this vulnerability via a malicious extension installation. This can lead to full compromise of the browser environment, affecting confidentiality, integrity, and availability of the user's browsing session. However, exploitation requires user interaction and installation of a malicious extension, which limits the attack surface.

A fixed version of Google Chrome is available at 151.0.7922.72. Users and administrators should update to this version or later to remediate the vulnerability. The vendor advisory linked confirms the availability of this update. No additional mitigation steps are indicated.