The vulnerability is an integer overflow error in the libxml component of Google Chrome, allowing an attacker who can serve a crafted HTML page to execute arbitrary code within the browser’s sandbox. The flaw is a classic CWE-190 condition and, while confined to the sandbox, the ability to run code remotely is a severe impact.

Google Chrome installations prior to 151.0.7922.72 are vulnerable. The CVE data does not specify a precise affected version range; all earlier releases may be impacted.

The CVSS score of 8.8 classifies the flaw as high severity, but the EPSS score of less than 1% indicates a low likelihood of exploitation at present. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is a remote attacker delivering a malicious HTML payload via an ordinary web page. If exploited, code would run only inside Chrome’s sandbox, but that still allows manipulation of user data and potential bypass of browser-level defenses.