Vulnerabilities > Samsung > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-12-08 CVE-2022-39910 Unspecified vulnerability in Samsung Pass 4.0.05.1
Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data of Samsung Pass on a certain state of an unlocked device using pop-up view.
high complexity
samsung
4.2
2022-12-08 CVE-2022-39911 Unspecified vulnerability in Samsung Pass 4.0.05.1
Improper check or handling of exceptional conditions vulnerability in Samsung Pass prior to version 4.0.06.1 allows attacker to access Samsung Pass.
low complexity
samsung
6.8
2022-12-08 CVE-2022-39915 Unspecified vulnerability in Samsung Calendar 12.3.05.10000
Improper access control vulnerability in Calendar prior to versions 11.6.08.0 in Android Q(10), 12.2.11.3000 in Android R(11), 12.3.07.2000 in Android S(12), and 12.4.02.0 in Android T(13) allows attackers to access sensitive information via implicit intent.
local
low complexity
samsung
5.5
2022-10-07 CVE-2022-39857 Unspecified vulnerability in Samsung Factorycamerafb 3.4.74
Improper access control vulnerability in CameraTestActivity in FactoryCameraFB prior to version 3.5.51 allows attackers to access broadcasting Intent as system uid privilege.
local
low complexity
samsung
5.5
2022-10-07 CVE-2022-39863 Unspecified vulnerability in Samsung Account
Intent redirection vulnerability in Samsung Account prior to version 13.5.01.3 allows attackers to access content providers without permission.
network
low complexity
samsung
4.7
2022-10-07 CVE-2022-39873 Unspecified vulnerability in Samsung Internet
Improper authorization vulnerability in Samsung Internet prior to version 18.0.4.14 allows physical attackers to add bookmarks in secret mode without user authentication.
low complexity
samsung
4.6
2022-10-07 CVE-2022-39874 Information Exposure Through Log Files vulnerability in Samsung Account
Sensitive log information leakage vulnerability in Samsung Account prior to version 13.5.0 allows attackers to unauthorized logout.
local
low complexity
samsung CWE-532
5.5
2022-10-07 CVE-2022-39875 Unspecified vulnerability in Samsung Account
Improper component protection vulnerability in Samsung Account prior to version 13.5.0 allows attackers to unauthorized logout.
local
low complexity
samsung
4.4
2022-10-07 CVE-2022-39877 Unspecified vulnerability in Samsung Group Sharing 10.8.03.2
Improper access control vulnerability in ProfileSharingAccount in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to identify the device.
network
low complexity
samsung
5.3
2022-10-07 CVE-2022-39878 Unspecified vulnerability in Samsung Checkout 5.0.53.1
Improper access control vulnerability in Samsung Checkout prior to version 5.0.55.3 allows attackers to access sensitive information via implicit intent broadcast.
local
low complexity
samsung
5.5