Search for vulnerabilities
Vulnerability details: VCID-hj7m-nzrm-9kee
Vulnerability ID VCID-hj7m-nzrm-9kee
Aliases CVE-2022-2479
Summary Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious app to obtain potentially sensitive information from internal file directories via a crafted HTML page.
Status Published
Exploitability 0.5
Weighted Severity 3.9
Risk 1.9
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-20 Improper Input Validation
System Score Found at
epss 0.00107 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00107 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00107 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00107 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00107 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00107 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00107 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00107 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00107 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00107 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00107 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00107 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00107 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00107 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00107 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00107 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00129 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00129 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00129 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00136 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00136 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00136 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00136 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00136 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00136 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00136 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00136 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00136 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
epss 0.00136 https://api.first.org/data/v1/epss?cve=CVE-2022-2479
cvssv3.1 4.3 https://nvd.nist.gov/vuln/detail/CVE-2022-2479
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2022-2479
https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop_19.html
https://crbug.com/1329987
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2163
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2477
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2478
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2479
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2480
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2481
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4915
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YKLJ3B3D5BCVWE3QNP4N7HHF26OHD567/
CVE-2022-2479 https://nvd.nist.gov/vuln/detail/CVE-2022-2479
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2022-2479
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.29641
EPSS Score 0.00107
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:39:59.420456+00:00 Alpine Linux Importer Import https://secdb.alpinelinux.org/edge/community.json 37.0.0