CVE-2022-4917: Incorrect security UI in Notifications
Incorrect security UI in Notifications in Google Chrome on Android prior to 103.0.5060.53 allowed a remote attacker to obscure the full screen notification via a crafted HTML page. (Chromium security severity: Low)
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2022-4917?
CVE-2022-4917 is a vulnerability in Google Chrome on Android that allows a remote attacker to obscure the full screen notification via a crafted HTML page.
What is the severity of CVE-2022-4917?
The severity of CVE-2022-4917 is medium with a CVSS score of 4.3.
How does CVE-2022-4917 affect Google Chrome on Android?
CVE-2022-4917 affects Google Chrome on Android versions prior to 103.0.5060.53.
How can I fix CVE-2022-4917?
To fix CVE-2022-4917, update Google Chrome on Android to version 103.0.5060.53 or later.
Where can I find more information about CVE-2022-4917?
You can find more information about CVE-2022-4917 in the references: [link1](https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html), [link2](https://crbug.com/1311683), [link3](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/).