Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: Samsung Mobile Devices SMR Feb-2023 Release 1 Clear all filters
TI-2023-07841 CVE-2023-21440 · GHSA-5qpj-qfq5-r2h7

Improper authorization in Samsung Mobile Devices

Priority LOW 27

Improper access control vulnerability in WindowManagerService prior to SMR Feb-2023 Release 1 allows attackers to take a screen capture.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00176 Published 2023-02-09 Fixed in SMR Feb-2023 Release 1 CWE-285
TI-2023-07840 CVE-2023-21439 · GHSA-rrxp-5q22-4jv9

Improper input validation in Samsung Mobile Devices

Priority LOW 36

Improper input validation vulnerability in UwbDataTxStatusEvent prior to SMR Feb-2023 Release 1 allows attackers to launch certain activities.

CVSS 3.1HIGH 8.5 Local No auth No interaction EPSS 0.00185 Published 2023-02-09 Fixed in SMR Feb-2023 Release 1 CWE-20
TI-2023-07839 CVE-2023-21438 · GHSA-4jvr-xj55-p58j

Improper access control in Samsung Mobile Devices

Priority LOW 12

Improper logic in HomeScreen prior to SMR Feb-2023 Release 1 allows physical attacker to access App preview protected by Secure Folder.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.0023 Published 2023-02-09 Fixed in SMR Feb-2023 Release 1 CWE-284
TI-2023-07838 CVE-2023-21437 · GHSA-22cq-h96p-qcc2

Improper authentication in Samsung Mobile Devices

Priority LOW 24

Improper access control vulnerability in Phone application prior to SMR Feb-2023 Release 1 allows local attackers to access sensitive information via implicit broadcast.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00151 Published 2023-02-09 Fixed in SMR Feb-2023 Release 1 CWE-287
TI-2023-07836 CVE-2023-21435 · GHSA-h2fp-w5pw-3h9q

Information disclosure in Samsung Mobile Devices

Priority LOW 24

Exposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR Feb-2023 Release 1 allows attackers to access the memory address information via log.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0018 Published 2023-02-09 Fixed in SMR Feb-2023 Release 1 CWE-200