CVE-2022-1499

CVE-2022-1499 is a medium-severity vulnerability affecting Google Chrome versions prior to 101.0.4951.41. It stems from an inappropriate implementation in WebAuthentication, allowing a remote attacker to bypass the same-origin policy through a specially crafted HTML page. The CVSS score of 6.3 indicates a low-complexity attack requiring user interaction, with potential for low impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, nor are there publicly available exploit codes in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, suggesting low current attention.