This vulnerability arises from inadequate enforcement of security policies in the FileSystem API implementation in Google Chrome versions before 151.0.7922.72. A remote attacker can exploit this flaw by crafting a malicious HTML page that causes leakage of cross-origin data. The CVSS score is 4.3 (medium), reflecting the limited impact scope (confidentiality loss only) and the requirement for user interaction. There is no indication of active exploitation in the wild. The vendor advisory linked does not explicitly state the patch status or remediation level, but the affected versions list includes 151.0.7922.72, implying that this version is the fixed release.

The vulnerability allows a remote attacker to leak confidential cross-origin data from the browser's FileSystem API. There is no impact on integrity or availability. Exploitation requires user interaction, such as visiting a crafted HTML page. No known active exploits have been reported.

A fix is available in Google Chrome version 151.0.7922.72. Users and administrators should update to this version or later to remediate the vulnerability. Since this is a client-side browser vulnerability, upgrading the browser is the primary mitigation step. The vendor advisory should be monitored for any additional guidance.