This vulnerability arises from an inappropriate implementation in the SanitizerAPI component of Google Chrome before version 148.0.7778.96. It enables remote attackers to inject arbitrary scripts or HTML content via a crafted HTML page, leading to a UXSS vulnerability. UXSS can allow attackers to bypass same-origin policy restrictions, potentially enabling malicious script execution in the context of trusted web pages. The vulnerability is identified as medium severity by Chromium security, but no CVSS score or detailed exploit information is provided. The vendor advisory linked is a general stable channel update announcement without explicit mention of this vulnerability's patch status.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts or inject HTML in the context of trusted web pages, potentially leading to unauthorized actions or data exposure within the browser session. However, there are no known exploits in the wild at the time of publication. The impact is classified as medium severity by Chromium security.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The linked Google Chrome stable channel update announcement does not explicitly confirm a fix for this vulnerability. Users and administrators should monitor official Google Chrome release notes and apply updates promptly once a fix is confirmed available.