Improper access control vulnerability in Quick Share prior to 13.5.52.0 allows local attacker to access local files.
Priority LOW 24Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
Improper access control vulnerability in Quick Share prior to 13.5.52.0 allows local attacker to access local files.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00186 8th percentileScored 2026-11-07
Fix Fixed Quick Share (Samsung Mobile): 13.5.52.0
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
Remediation
- Fix · CNA Quick Share (Samsung Mobile) Fixed in 13.5.52.0
Timeline
- 2026-10-02 Threatist record created from CVE-2023-42544
- 2026-10-03 Alias added: GHSA-27pw-7wxg-pvx9
References
More Samsung Quick Share vulnerabilities
- TI-2022-12880 Improper access control in Samsung Quick Share CVSS 3.1MEDIUM 5.5
- TI-2024-33006 Path traversal in Samsung Quick Share Agent CVSS 3.1MEDIUM 4.3
- TI-2022-18854 Improper access control in Samsung QuickShare CVSS 3.1MEDIUM 4.4
- TI-2023-07863 The sensitive information exposure vulnerability in Quick Share Agent prior to versions… CVSS 3.1MEDIUM 4.2
Sources
- CVE-2023-42544 · CVE Program
- CVE-2023-42544 · NVD
- FIRST EPSS
- GHSA-27pw-7wxg-pvx9 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences