This vulnerability is an incorrect authorization flaw in Chrome extensions that permits a remote attacker to bypass system access restrictions by installing a crafted extension. The flaw is classified as CWE-863. Based on the description, it is inferred that an attacker who succeeds may be able to execute privileged actions on the user’s machine, potentially compromising confidentiality, integrity, and availability of local resources.

The flaw applies to Google Chrome on all platforms where the stable channel is available, specifically versions earlier than 157.0.8103.38. Users running any pre‑157.0.8103.38 build are affected.

The EPSS score is unavailable and the vulnerability is not listed in CISA’s KEV catalog, indicating an unknown or low exploitation density. Chromium’s advisory assigns a Medium severity rating. The likely attack vector involves a malicious or compromised extension being installed, after which the authorization bypass allows privileged operations. Based on the description, it is inferred that no publicly available exploit code is cited, but the vulnerability could potentially be leveraged via social engineering or a compromised extension store.