CVE-2022-36853

Intent redirection in Photo Editor prior to SMR Sep-2022 Release 1 allows attacker to get sensitive information...

CVE-2022-36853

Intent redirection in Photo Editor prior to SMR Sep-2022 Release 1 allows attacker to get sensitive information...

Design/Logic Flaw

Pending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent...

Information disclosure

Intent redirection in Photo Editor prior to SMR Sep-2022 Release 1 allows attacker to get sensitive information...

Input validation

Improper restriction of broadcasting Intent in SaWebViewRelayActivity of?Waterplugin prior to version 2.2.11.22081151 allows attacker to access the file without permission...

Design/Logic Flaw

Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent...

Input validation

Improper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior to version 2.2.11.22081151 leaks MAC address of the connected Bluetooth device...

Design/Logic Flaw

Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent...

CVE-2022-36864

Samsung Email contains an improper access control and intent redirection vulnerability affecting versions prior to 6.1.70.20. The issue allows an attacker to access a specific formatted file and execute privileged behavior. Remediation: update to Samsung Email 6.1.70.20 or later. Exploitation det...

CVE-2022-36853

The CVE-2022-36853 issue affects Samsung Photo Editor (on Samsung mobile devices) prior to the SMR Sep-2022 Release 1. Root cause: intent redirection in Photo Editor that may disclose sensitive information. Impact: enables information disclosure to an attacker without user interaction (per NVD me...

CVE-2022-36872

Pending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent...

CVE-2022-36872

The CVE-2022-36872 entry describes a Pending Intent hijacking vulnerability in Samsung Pay’s SpayNotification component. Affected are Samsung Pay versions prior to 5.0.63 for Korea and prior to 5.1.47 for Global, where an attacker could access files without permission by exploiting an implicit In...

CVE-2022-36871

Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent...

CVE-2022-36873

Improper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior to version 2.2.11.22081151 leaks MAC address of the connected Bluetooth device...

CVE-2022-36873

The vulnerability CVE-2022-36873 concerns Waterplugin’s GalaxyStoreBridgePageLinker prior to version 2.2.11.22081151, where an improper restriction of broadcasting Intent leaks the MAC address of the connected Bluetooth device. Affected component: Waterplugin (GalaxyStoreBridgePageLinker). Root c...

CVE-2022-36871

The CVE-2022-36871 issue affects Samsung Pay NotiCenterUtils and is a Pending Intent hijacking vulnerability that could allow an attacker to access files without permission via implicit Intent. Affected versions are Samsung Pay prior to 5.0.63 for Korea and prior to 5.1.47 for Global. The root ca...

CVE-2022-36870

Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent...

CVE-2022-36870

CVE-2022-36870 concerns Samsung Pay’s MTransferNotificationManager. A pending-intent hijack in versions prior to 5.0.63 (KR) and 5.1.47 (Global) allows an attacker to access files without permission via an implicit Intent. Documents from PT-2022-23674 and related feeds specify the affected versio...

CVE-2022-36875

CVE-2022-36875 affects Waterplugin prior to version 2.2.11.22081151, with the root cause in SaWebViewRelayActivity where broadcasting intents was improperly restricted. This leads to an attacker being able to access files without permission. Remediation: upgrade to Waterplugin 2.2.11.22081151 or ...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices version 5.1.47 for international and version 5.0.63 for Korea, which stems from SpayNotification in...