Samsung: Security Vulnerabilities
Use of implicit intent for sensitive communication vulnerability in startEmailValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.
CVSS Score
5.5
EPSS Score
0.002
Published
2023-11-07
Use of implicit intent for sensitive communication vulnerability in startMandatoryCheckActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.
CVSS Score
5.5
EPSS Score
0.003
Published
2023-11-07
Improper access control vulnerability in Samsung Push Service prior to 3.4.10 allows local attackers to get register ID to identify the device.
CVSS Score
3.3
EPSS Score
0.001
Published
2023-11-07
Improper verification of intent by broadcast receiver vulnerability in Bixby Voice prior to version 3.3.35.12 allows attackers to access arbitrary data with Bixby Voice privilege.
CVSS Score
6.2
EPSS Score
0.003
Published
2023-11-07
Improper access control vulnerability in Quick Share prior to 13.5.52.0 allows local attacker to access local files.
CVSS Score
5.5
EPSS Score
0.001
Published
2023-11-07
An improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.
CVSS Score
5.9
EPSS Score
0.001
Published
2023-11-07
PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows local attackers to access data.
CVSS Score
4.7
EPSS Score
0.001
Published
2023-11-07
Improper access control vulnerability in Samsung Account prior to version 14.5.01.1 allows attackers to access sensitive information via implicit intent.
CVSS Score
4.0
EPSS Score
0.001
Published
2023-11-07
Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id.
CVSS Score
4.0
EPSS Score
0.003
Published
2023-11-07
An improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.
CVSS Score
8.4
EPSS Score
0.001
Published
2023-11-07