Google Chrome File Picker Cross-Origin Data Leak Vulnerability

A vulnerability in the File Picker component of Google Chrome has been identified, allowing remote attackers to leak cross-origin data. This issue affects Google Chrome versions prior to 139.0.7258.127. The vulnerability arises from an inappropriate implementation that enabled data leakage through a crafted HTML page, provided the user engaged in specific UI gestures.

Impact

Exploitation of this vulnerability could lead to unauthorized cross-origin data leakage.

Remediation

Users can update to Google Chrome version 139.0.7258.127 or later to address this vulnerability.