This vulnerability arises from improper implementation in the FileSystem feature of Google Chrome versions before 149.0.7827.53. It enables an attacker with control over the renderer process to circumvent the browser's same origin policy, potentially allowing unauthorized access to resources across origins via a specially crafted HTML page. The issue is classified as medium severity by Chromium security. No CVSS score or explicit remediation level is provided. The vendor advisory URL references a stable channel update but does not confirm patch availability in the provided data.

If exploited, this vulnerability could allow an attacker who has compromised the renderer process to bypass the same origin policy, potentially leading to unauthorized access to web resources from different origins. This could undermine browser security boundaries and expose sensitive data or functionality. However, exploitation requires prior compromise of the renderer process, limiting the scope of impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Since this vulnerability affects Chrome versions prior to 149.0.7827.53, updating to version 149.0.7827.53 or later is recommended if confirmed as fixed by the vendor. Monitor official Google Chrome release notes for confirmation of the fix.