Lucene search
HistoryOct 07, 2022 - 3:15 p.m.
CVE-2022-39862
cve-2022-39862
dynamic lockscreen
android r
android s
unauthorized use
javascript interface api
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
47.1%
Improper authorization in Dynamic Lockscreen prior to SMR Sep-2022 Release 1 in Android R(11) and 3.3.03.66 in Android S(12) allows unauthorized use of javascript interface api.
Affected configurations
Node
samsungdynamic_lockscreenRange<3.3.03.66
googleandroidMatch11.0
ORgoogleandroidMatch12.0
Related
cvelist
cvelist
CVE-2022-39862
2022-10-07 00:00:00
prion
prion
Authorization
2022-10-07 15:15:00
cve
cve
CVE-2022-39862
2022-10-07 15:15:21
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
47.1%
Related for NVD:CVE-2022-39862