Vulnerabilities > Samsung

DATE CVE VULNERABILITY TITLE RISK
2023-11-07 CVE-2023-42541 Incorrect Authorization vulnerability in Samsung Push Service
Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id.
network
low complexity
samsung CWE-863
5.3
2023-11-07 CVE-2023-42542 Unspecified vulnerability in Samsung Push Service
Improper access control vulnerability in Samsung Push Service prior to 3.4.10 allows local attackers to get register ID to identify the device.
local
low complexity
samsung
3.3
2023-11-07 CVE-2023-42543 Unspecified vulnerability in Samsung Bixby Voice 3.0.52.14/3.1.12
Improper verification of intent by broadcast receiver vulnerability in Bixby Voice prior to version 3.3.35.12 allows attackers to access arbitrary data with Bixby Voice privilege.
network
low complexity
samsung
7.5
2023-11-07 CVE-2023-42544 Unspecified vulnerability in Samsung Quick Share 13.1.2.4/3.5.14.18/3.5.16.20
Improper access control vulnerability in Quick Share prior to 13.5.52.0 allows local attacker to access local files.
local
low complexity
samsung
5.5
2023-11-07 CVE-2023-42545 Unspecified vulnerability in Samsung Phone 12.7.20.12
Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13 allows attackers to access location data.
network
low complexity
samsung
7.5
2023-11-07 CVE-2023-42546 Exposure of Resource to Wrong Sphere vulnerability in Samsung Account
Use of implicit intent for sensitive communication vulnerability in startAgreeToDisclaimerActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.
network
low complexity
samsung CWE-668
6.5
2023-11-07 CVE-2023-42547 Exposure of Resource to Wrong Sphere vulnerability in Samsung Account
Use of implicit intent for sensitive communication vulnerability in startEmailValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.
network
low complexity
samsung CWE-668
6.5
2023-11-07 CVE-2023-42548 Unspecified vulnerability in Samsung Account
Use of implicit intent for sensitive communication vulnerability in startMandatoryCheckActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.
network
low complexity
samsung
6.5
2023-11-07 CVE-2023-42549 Exposure of Resource to Wrong Sphere vulnerability in Samsung Account
Use of implicit intent for sensitive communication vulnerability in startNameValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.
network
low complexity
samsung CWE-668
6.5
2023-11-07 CVE-2023-42550 Unspecified vulnerability in Samsung Account
Use of implicit intent for sensitive communication vulnerability in startSignIn in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.
network
low complexity
samsung
6.5