Thanos-soft Cheetah Browser 跨站脚本漏洞

Thanos-soft Cheetah Browser is an application from Thanos-soft. A browser. A cross-site scripting vulnerability exists in Thanos-Soft Cheetah Browser in Android 1.2.0, which stems from an insufficient filter in the intent scheme. It results in cross-site scripting being required for any website o...

CVE-2021-25377

Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P9.0 below, and 12.2.0.5 in Android Q10.0 above allows attacker to execute privileged action...

CVE-2021-25379

Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action...

CVE-2021-25377

Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P9.0 below, and 12.2.0.5 in Android Q10.0 above allows attacker to execute privileged action...

CVE-2021-25379

Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action...

CVE-2021-25357

A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in Android O8.x and P9.0, 3.4.81.1 in Android Q10,0, and 3.6.80.7 in Android R11.0 allows unprivileged applications to access contact information...

CVE-2021-25364

A pendingIntent hijacking vulnerability in Secure Folder prior to SMR APR-2021 Release 1 allows unprivileged applications to access contact information...

Design/Logic Flaw

Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P9.0 below, and 12.2.0.5 in Android Q10.0 above allows attacker to execute privileged action...

Information disclosure

Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action...

CVE-2021-25379

Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action...

CVE-2021-25377

Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P9.0 below, and 12.2.0.5 in Android Q10.0 above allows attacker to execute privileged action...

CVE-2021-25357

A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in Android O8.x and P9.0, 3.4.81.1 in Android Q10,0, and 3.6.80.7 in Android R11.0 allows unprivileged applications to access contact information...

CVE-2021-25364

A pendingIntent hijacking vulnerability in Secure Folder prior to SMR APR-2021 Release 1 allows unprivileged applications to access contact information...

CVE-2021-25379

Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action...

CVE-2021-25379

Samsung Gallery (Android) prior to version 5.4.16.1 is affected by an intent-redirection elevation-of-privilege vulnerability. The issue allows an attacker to trigger privileged actions within the app. Public sources consistently describe the flaw as an elevation of privilege via intent redirecti...

CVE-2021-25377

Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P9.0 below, and 12.2.0.5 in Android Q10.0 above allows attacker to execute privileged action...

CVE-2021-25377

CVE-2021-25377 affects Samsung Experience Service on Android: privilege escalation via an intent redirection that enables execution of a privileged action. Affected versions are 10.8.0.4 (Android P) and 12.2.0.5 (Android Q). Exploitation is described as a local action with no user interaction req...

PT-2021-16557 · Samsung · Secure Folder

Name of the Vulnerable Software and Affected Versions: Secure Folder versions prior to SMR APR-2021 Release 1 Description: A pendingIntent hijacking issue allows unprivileged applications to access contact information. Recommendations: For versions prior to SMR APR-2021 Release 1, update to SMR...

PT-2021-16568

Name of the Vulnerable Software and Affected Versions: Samsung Experience Service versions 10.8.0.4 and earlier in Android P9.0 and below, and 12.2.0.5 and earlier in Android Q10.0 and above Description: The issue allows an attacker to execute privileged actions due to intent redirection...

PT-2021-16570

Name of the Vulnerable Software and Affected Versions: Gallery versions prior to 5.4.16.1 Description: The issue allows an attacker to execute privileged actions due to an intent redirection vulnerability. Recommendations: For versions prior to 5.4.16.1, update to version 5.4.16.1 or later to...