CVE-2022-36835

Implicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34 allows attackers to access arbitrary files...

CVE-2022-36835

Implicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34 allows attackers to access arbitrary files...

CVE-2022-36831

Path traversal vulnerability in UriFileUtils of Samsung Notes prior to version 4.3.14.39 allows attacker to access some file as Samsung Notes permission...

CVE-2022-36830

PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via implicit intent...

CVE-2022-36829

PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via implicit intent...

CVE-2022-33721

A vulnerability using PendingIntent in DeX for PC prior to SMR Aug-2022 Release 1 allows attackers to access files with system privilege...

CVE-2022-33721

A vulnerability using PendingIntent in DeX for PC prior to SMR Aug-2022 Release 1 allows attackers to access files with system privilege...

CVE-2022-36835

Implicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34 allows attackers to access arbitrary files...

CVE-2022-33721

CVE-2022-33721 affects Samsung DeX for PC prior to SMR Aug-2022 Release 1, due to improper handling of PendingIntent that enables a local attacker to access files with system privileges. The Red Hat/NVD entries reiterate the same description; Red Hat lists it under CVE-2022-33721, and other sourc...

CVE-2022-33721

A vulnerability using PendingIntent in DeX for PC prior to SMR Aug-2022 Release 1 allows attackers to access files with system privilege...

CVE-2022-36830

PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via implicit intent...

CVE-2022-36830

CVE-2022-36830 affects Samsung Charm (Charm by Samsung) prior to version 1.2.3. The root cause is a PendingIntent hijacking in the cancelAlarmManager, enabling local attackers to access files without permission via implicit intents. Affected software is Charm before 1.2.3; impact includes high co...

CVE-2022-36829

PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via implicit intent...

CVE-2022-36829

Summary of findings (CVE-2022-36829) : The vulnerability affects Charm by Samsung, in the releaseAlarm function. It is a PendingIntent hijacking issue that allows local attackers to access files without permission via implicit intents on versions prior to 1.2.3 . The root cause is a flaw in how r...

CVE-2022-36831

CVE-2022-36831 affects Samsung Notes, specifically UriFileUtils in versions prior to 4.3.14.39. The root cause is a path traversal vulnerability that allows an attacker with Samsung Notes permissions to access some files on the device (local attack vector). Impact is exposure of confidential data...

CVE-2022-36829: Use of Implicit Intent for Sensitive Communication

PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via implicit intent...

PT-2022-23639 · Samsung · Samsung Internet Browser

Name of the Vulnerable Software and Affected Versions: Samsung Internet Browser versions prior to 17.0.7.34 Description: The issue allows attackers to access arbitrary files through an Implicit Intent hijacking vulnerability. Recommendations: For versions prior to 17.0.7.34, update to version...

CVE-2022-36831: Improper Limitation of a Pathname to a Restricted Directory

Path traversal vulnerability in UriFileUtils of Samsung Notes prior to version 4.3.14.39 allows attacker to access some file as Samsung Notes permission...

CVE-2022-31662: Improper Limitation of a Pathname to a Restricted Directory

VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability. A malicious actor with network access may be able to access arbitrary files...

PT-2022-21832 · Samsung · Launcherprovider

Name of the Vulnerable Software and Affected Versions: LauncherProvider versions prior to SMR Aug-2022 Release 1 Description: The issue is related to improper access control and path traversal in LauncherProvider, allowing a local attacker to access files of One UI. Recommendations: For versions...