CVE-2022-4187

CVE-2022-4187 is a medium-severity vulnerability affecting Google Chrome on Windows prior to version 108.0.5359.71. It involves insufficient policy enforcement in DevTools, allowing a remote attacker to bypass filesystem restrictions through a specially crafted HTML page. The CVSS score is 6.5, indicating a network-based attack requiring user interaction, with a high impact on integrity but no impact on confidentiality or availability. There is no evidence of active exploitation, public exploit code, or significant community discussion, though it was mentioned in a Microsoft Patch Tuesday article.