This vulnerability involves an out of bounds read in the FileSystem feature of Google Chrome on Mac versions before 148.0.7778.168. Exploitation requires user interaction involving specific UI gestures on a maliciously crafted HTML page, potentially exposing sensitive information from process memory. The issue is recognized by Chromium security as high severity. No CVSS score or explicit remediation level is provided in the input data. The vendor advisory URL is available for further details and patch confirmation.

A remote attacker who successfully convinces a user to engage in certain UI gestures on a malicious HTML page may extract sensitive information from Chrome's process memory. This could lead to information disclosure but does not indicate code execution or system compromise. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html for current remediation guidance. Users should update Google Chrome on Mac to version 148.0.7778.168 or later once available. Until then, exercise caution when interacting with untrusted web content that may attempt to trigger the vulnerability.