Read the docs
TI-2022-06617 Aliases CVE-2022-22287GHSA-vpwc-jhj4-x9q2

Abitrary file access vulnerability in Samsung Email prior to 6.1.60.16 allows attacker to read isolated data in sandbox.

Priority LOW 21CWE-20Published · Updated

Key facts

Attack vector
Physical
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

Abitrary file access vulnerability in Samsung Email prior to 6.1.60.16 allows attacker to read isolated data in sandbox.

Why it matters now

EPSS 0.00251 16th percentileScored 2026-11-07
Fix Fixed Samsung Email (Samsung Mobile): 6.1.60.16

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SamsungSamsung Email- to before 6.1.60.166.1.60.16Patch availableCNA
  • Samsung Email VendorSamsung Affected - to before 6.1.60.16 Fixed in 6.1.60.16 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:samsung:samsung_email:*:*:*:*:*:*:*:*before 6.1.60.16VulnerableSamsung
  • cpe:2.3:a:samsung:samsung_email:*:*:*:*:*:*:*:* Versions before 6.1.60.16 Vulnerable ·Samsung

Remediation

  • Fix · CNA Samsung Email (Samsung Mobile) Fixed in 6.1.60.16

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-22287
  2. 2026-10-03 Alias added: GHSA-vpwc-jhj4-x9q2

References

Advisory 1

  • TI-2018-07406 Improper input validation in Samsung Email CVSS 3.0HIGH 7.8
  • TI-2022-17079 Improper access control in Samsung Email CVSS 3.1HIGH 7.8
  • TI-2022-17052 Improper authorization in Samsung email CVSS 3.1MEDIUM 6.2
  • TI-2018-07407 Information disclosure in Samsung Email CVSS 3.0MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences