An insufficient policy enforcement bug in Chrome extensions allowed a remote attacker who had already compromised the renderer process to bypass discretionary access control by loading a crafted HTML page. This issue aligns with CWE‑280 and CWE‑693, reflecting improper policy enforcement and control over the renderer’s privileges. The vulnerability enables the attacker to make the renderer perform privileged actions, such as accessing files or executing code on the host, thereby elevating privileges within the browser sandbox. The Chromium security severity is Medium.

Google Chrome on all desktop platforms. Versions prior to 148.0.7778.96 are affected. The vulnerability is tied to the Chrome rendering engine and applies to all operating systems that run the desktop browser.

The CVSS score of 4.2 and the EPSS score is < 1%, indicating a low but non‑zero exploitation probability. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires an attacker to have already compromised the renderer process, typically via a local or previously privileged vector. Once the renderer is compromised, the crafted HTML page can be delivered to elevate privileges within that process. The absence of a publicly available zero‑day exploit and the need for prior renderer compromise suggest the risk is moderate, but the potential impact remains significant for affected users.