CVE-2022-2479

CVE-2022-2479 is a medium-severity vulnerability affecting Google Chrome on Android prior to version 103.0.5060.134. It stems from insufficient validation of untrusted input within the File component, allowing an attacker to potentially obtain sensitive information from internal file directories. This attack requires user interaction, as the victim must be convinced to install a malicious application and then visit a crafted HTML page. While the CVSS score is 4.3 (MEDIUM), indicating low impact on confidentiality, there is no evidence of active exploitation, nor are there publicly available exploit modules or proof-of-concept code. Community discussion and media coverage are minimal, suggesting limited current attention.