Vulnerabilities > Samsung > Android > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-08-07 CVE-2024-34606 Unspecified vulnerability in Samsung Android 12.0/13.0/14.0
Improper access control in SmartThingsService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.
local
low complexity
samsung
5.5
2024-08-07 CVE-2024-34607 Unspecified vulnerability in Samsung Android 12.0/13.0/14.0
Improper access control in SamsungNotesService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.
local
low complexity
samsung
5.5
2024-08-07 CVE-2024-34608 Unspecified vulnerability in Samsung Android 12.0/13.0/14.0
Improper access control in PaymentManagerService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.
local
low complexity
samsung
5.5
2024-08-07 CVE-2024-34609 Unspecified vulnerability in Samsung Android 12.0/13.0/14.0
Improper access control in VoiceNoteService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background.
local
low complexity
samsung
5.5
2024-08-07 CVE-2024-34610 Unspecified vulnerability in Samsung Android 12.0/13.0/14.0
Improper access control in ExtControlDeviceService prior to SMR Aug-2024 Release 1 allows local attackers to access protected data.
local
low complexity
samsung
5.5
2024-08-07 CVE-2024-34611 Unspecified vulnerability in Samsung Android 12.0/13.0/14.0
Improper access control in KnoxService prior to SMR Aug-2024 Release 1 allows local attackers to get sensitive information.
local
low complexity
samsung
5.5
2024-08-07 CVE-2024-34616 Incorrect Default Permissions vulnerability in Samsung Android 12.0/13.0/14.0
Improper handling of insufficient permission in KnoxDualDARPolicy prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive data.
local
low complexity
samsung CWE-276
5.5
2024-07-08 CVE-2024-34602 Unspecified vulnerability in Samsung Android 12.0/13.0/14.0
Use of implicit intent for sensitive communication in Samsung Messages prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.
local
low complexity
samsung
5.5
2024-07-08 CVE-2024-34603 Unspecified vulnerability in Samsung Android 13.0/14.0
Improper access control in Samsung Message prior to SMR Jul-2024 Release 1 allows local attackers to access location data.
local
low complexity
samsung
5.5
2024-07-02 CVE-2024-20889 Improper Authentication vulnerability in Samsung Android 12.0/13.0/14.0
Improper authentication in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to pair with devices.
low complexity
samsung CWE-287
4.3