This vulnerability arises from improper data validation in the MediaCapture feature of Google Chrome on Mac before version 149.0.7827.103. An attacker can exploit this flaw by crafting a malicious HTML page that causes cross-origin data leakage, violating same-origin policy protections. The issue is recognized as high severity by Chromium security. Although no explicit patch status is stated in the input, the vendor advisory URL points to a stable channel update likely containing the fix.

The impact is a high-severity cross-origin data leak, which can expose sensitive information from other origins to an attacker-controlled page. This compromises user privacy and security by bypassing browser-enforced origin isolation. There are no known exploits in the wild at the time of this report.

A fix is available in Google Chrome version 149.0.7827.103 and later. Users and administrators should update to this version or newer to remediate the vulnerability. Since this is a client-side application, updating the browser is the primary mitigation. The vendor advisory linked should be consulted for confirmation and additional details.