Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Samsung Mobile Galaxy Store 4.5.49.8 Clear all filters
TI-2023-07917 CVE-2023-21516 · GHSA-q3ph-6xgh-hmgq

Improper input validation in Samsung Galaxy Store

Priority MEDIUM 48

XSS vulnerability from InstantPlay in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00549 Published 2023-05-26 Fixed in 4.5.49.8 CWE-20
TI-2023-07916 CVE-2023-21515 · GHSA-6q4x-p962-hh53

Improper input validation in Samsung Galaxy Store

Priority MEDIUM 45

InstantPlay which included vulnerable script which could execute javascript in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00521 Published 2023-05-26 Fixed in 4.5.49.8 CWE-20
TI-2023-07915 CVE-2023-21514 · GHSA-xm4h-vrcx-rw8c

Improper input validation in Samsung Galaxy Store

Priority MEDIUM 41

Improper scheme validation from InstantPlay Deeplink in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00521 Published 2023-05-26 Fixed in 4.5.49.8 CWE-20