Based on the description, it is inferred that the Chrome Extensions API suffers from an integer overflow that allows read operations outside the allocated bounds. This flaw, identified as CWE‑190, enables an attacker who convinces a user to install a malicious extension to access memory that contains sensitive data from the browser process. The official Chromium severity ranking labels the issue as high, underscoring its potential to leak application‑level information.

All desktop installations of Google Chrome with a version number lower than 150.0.7871.115 are affected. The flaw exists in the extensions handling code across all common platforms (Windows, macOS, Linux). Any installed extension that accesses the vulnerable API is capable of triggering the overflow.

The CVSS score is 4.3, indicating moderate severity. The EPSS score is lower than 1%, evidencing that exploitation probability is low. The vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is a user installing a malicious extension after social engineering, as the flaw requires that the attacker persuade a victim to install a crafted extension. Once in place, the extension can perform out‑of‑bounds reads that could expose application‑level data.