Lucene search

K
cvelistSamsungMobileCVELIST:CVE-2024-20838
HistoryMar 05, 2024 - 4:44 a.m.

CVE-2024-20838

2024-03-0504:44:47
SamsungMobile
www.cve.org
samsung internet
validation vulnerability
local attackers
arbitrary code
security issue

CVSS3

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

EPSS

0

Percentile

9.0%

Improper validation vulnerability in Samsung Internet prior to version 24.0.3.2 allows local attackers to execute arbitrary code.

CNA Affected

[
  {
    "vendor": "Samsung Mobile",
    "product": "Samsung Internet",
    "versions": [
      {
        "status": "unaffected",
        "version": "24.0.3.2"
      }
    ],
    "defaultStatus": "affected"
  }
]

CVSS3

6.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

EPSS

0

Percentile

9.0%

Related for CVELIST:CVE-2024-20838