Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Samsung Mobile Galaxy Store 4.5.40.5 Clear all filters
TI-2022-11224 CVE-2022-28544 · GHSA-h4gj-h272-9fcm

Path traversal in Samsung Galaxy Store

Priority LOW 29

Path traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to version 4.5.40.5 allows attacker to access the file of Galaxy store.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00904 Published 2022-04-11 Fixed in 4.5.40.5 CWE-22
TI-2022-11222 CVE-2022-28542 · GHSA-4h5x-x4pf-rgvw

Improper access control in Samsung Galaxy Store

Priority LOW 30

Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access privileged content providers as Galaxy Store permission.

CVSS 3.1MEDIUM 6.8 Local No auth No interaction EPSS 0.00267 Published 2022-04-11 Fixed in 4.5.40.5 CWE-284