Design/Logic Flaw

Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13 allows attackers to access location data...

Privilege escalation

Use of implicit intent for sensitive communication vulnerability in startSignIn in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...

Improper access control

Improper access control vulnerability in Samsung Account prior to version 14.5.01.1 allows attackers to access sensitive information via implicit intent...

Design/Logic Flaw

Use of implicit intent for sensitive communication vulnerability in startMandatoryCheckActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...

CVE-2023-42555

CVE-2023-42555 concerns Samsung EasySetup prior to version 11.1.13, where use of implicit intents for sensitive communications exposes the device’s Bluetooth address. The vulnerability arises from the sensitive data being handled via an implicit inter-process communication path, enabling a local ...

CVE-2023-42552

Implicit intent hijacking vulnerability in Firewall application prior to versions 12.1.00.24 in Android 11, 13.1.00.16 in Android 12 and 14.1.00.7 in Android 13 allows 3rd party application to tamper the database of Firewall...

CVE-2023-42551

Use of implicit intent for sensitive communication vulnerability in startTncActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...

CVE-2023-42551

Samsung Account contains a vulnerability in startTncActivity where implicit intents enable access to arbitrary files with Samsung Account privileges. Affected versions are prior to 14.5.00.7. The issue stems from how sensitive communications are handled, potentially allowing local attackers to re...

CVE-2023-42551

Use of implicit intent for sensitive communication vulnerability in startTncActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...

CVE-2023-42550

Use of implicit intent for sensitive communication vulnerability in startSignIn in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...

CVE-2023-42550

CVE-2023-42550 concerns Samsung Account: vulnerable in startSignIn prior to version 14.5.00.7 due to use of an implicit intent for sensitive communication, enabling an attacker with Samsung Account privileges to access arbitrary files. Documents describe the affected component as the Samsung Acco...

CVE-2023-42550

Use of implicit intent for sensitive communication vulnerability in startSignIn in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...

CVE-2023-42549

Use of implicit intent for sensitive communication vulnerability in startNameValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...

CVE-2023-42549

Use of implicit intent for sensitive communication vulnerability in startNameValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...

CVE-2023-42549

Mode C: CVE-2023-42549 affects Samsung Account prior to 14.5.00.7. The vulnerability arises from use of an implicit intent in startNameValidationActivity, enabling an attacker with Samsung Account privileges to access arbitrary files. Public exploitation details are not provided in the supplied d...

CVE-2023-42548

Use of implicit intent for sensitive communication vulnerability in startMandatoryCheckActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...

CVE-2023-42548

Use of implicit intent for sensitive communication vulnerability in startMandatoryCheckActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...

CVE-2023-42548

The CVE-2023-42548 entry concerns Samsung Account (startMandatoryCheckActivity). Affected software: Samsung Account versions prior to 14.5.00.7. Issue: use of an implicit intent for sensitive communications, enabling an attacker to access arbitrary files using Samsung Account privileges. Impact: ...

CVE-2023-42547

Use of implicit intent for sensitive communication vulnerability in startEmailValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...

CVE-2023-42547

Use of implicit intent for sensitive communication vulnerability in startEmailValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...