This vulnerability involves an inappropriate implementation in the HTML parser component of Google Chrome versions before 151.0.7922.72. It enables a remote attacker to bypass the browser's content security policy by delivering a specially crafted HTML page. The vulnerability is tracked as CWE-693 (Protection Mechanism Failure). The CVSS 3.1 vector indicates a network attack vector with low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and no availability impact.

An attacker can bypass the content security policy in affected versions of Google Chrome, potentially allowing the execution of unauthorized or malicious content in the browser context. However, the impact is limited to integrity and does not affect confidentiality or availability. No known active exploits have been reported.

The vendor advisory linked indicates a stable channel update for desktop Chrome, implying that remediation is available in version 151.0.7922.72. Users should update to this version or later to mitigate the vulnerability. Since no explicit remediation level or patch link was provided, users should consult the vendor advisory for confirmation and update instructions.