This vulnerability arises from insufficient policy enforcement in the DevTools component of Google Chrome versions before 151.0.7922.72. An attacker who persuades a user to install a crafted malicious Chrome extension could leverage this flaw to perform privilege escalation within the browser environment. The vulnerability is classified as low severity by Chromium security. There is no CVSS score available, and no known exploits have been reported. The vendor advisory is available but does not explicitly state the remediation level or patch status.

An attacker who successfully convinces a user to install a malicious Chrome extension could escalate privileges within the browser. This could potentially allow the attacker to perform actions beyond the intended permission scope of the extension. However, the overall severity is low, and no active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html for current remediation guidance. Users and administrators should update Chrome to version 151.0.7922.72 or later once available to address this issue. Until then, caution should be exercised when installing extensions, especially from untrusted sources.