CVE-2022-4917: 
Google Chrome vulnerability analysis and mitigation

CVE-2022-4917 is a security vulnerability discovered in Google Chrome on Android prior to version 103.0.5060.53. The vulnerability was related to incorrect security UI implementation in the Notifications feature, which could allow a remote attacker to obscure the full screen notification through a crafted HTML page. Google classified this vulnerability with a Low security severity rating (Chrome Release, NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 4.3 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N. This scoring indicates that the vulnerability can be exploited remotely, requires low attack complexity, needs no privileges, but does require user interaction. The scope is unchanged, and it only affects integrity with low impact (NVD).

The vulnerability allows an attacker to obscure the full screen notification through a crafted HTML page, potentially leading to user interface spoofing attacks. The impact is considered low as it only affects the integrity of the notification display and requires user interaction (NVD).

The vulnerability was patched in Google Chrome version 103.0.5060.53. Users are advised to update their Chrome browser to this version or later to mitigate the risk (Chrome Release).