7322 matches found
Input validation
Improper input validation vulnerability in FileProviderStatusReceiver in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows local attackers to delete arbitrary files with Samsung Keyboard privilege...
Input validation
Improper input validation vulnerability in Knox AI prior to SMR Sep-2023 Release 1 allows local attackers to launch privileged activities...
Privilege escalation
Improper privilege management vulnerability in FolderLockNotifier in One UI Home prior to SMR Sep-2023 Release 1 allows local attackers to change some settings of the folder lock...
CVE-2023-32162 Wacom Drivers for Windows Incorrect Permission Assignment Local Privilege Escalation Vulnerability
Wacom Drivers for Windows Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Wacom Drivers for Windows. An attacker must first obtain the ability to execute low-privileged code on...
CVE-2023-30726
PendingIntent hijacking vulnerability in GameLauncher prior to version 4.2.59.5 allows local attackers to access data...
CVE-2023-30726
PendingIntent hijacking vulnerability in GameLauncher prior to version 4.2.59.5 allows local attackers to access data...
CVE-2023-30719
Exposure of Sensitive Information vulnerability in InboundSmsHandler prior to SMR Sep-2023 Release 1 allows local attackers to access certain message data...
CVE-2023-30719
CVE-2023-30719 affects Samsung InboundSmsHandler prior to SMR Sep-2023 Release 1. The vulnerability exposes sensitive message data to local attackers due to improper exposure of information in InboundSmsHandler. Affected software/versions: InboundSmsHandler before SMR Sep-2023 Release 1. Impact i...
CVE-2023-30713
Improper privilege management vulnerability in FolderLockNotifier in One UI Home prior to SMR Sep-2023 Release 1 allows local attackers to change some settings of the folder lock...
CVE-2023-30713
Improper privilege management vulnerability in FolderLockNotifier in One UI Home prior to SMR Sep-2023 Release 1 allows local attackers to change some settings of the folder lock...
CVE-2023-30710
Improper input validation vulnerability in Knox AI prior to SMR Sep-2023 Release 1 allows local attackers to launch privileged activities...
CVE-2023-30710
Improper input validation vulnerability in Knox AI prior to SMR Sep-2023 Release 1 allows local attackers to launch privileged activities...
CVE-2023-30710
CVE-2023-30710 affects Samsung Knox AI prior to the SMR Sep-2023 Release 1. The issue is an improper input validation vulnerability that enables local attackers with low privileges and no user interaction to gain privileged activities on affected devices. The root cause is input validation weakne...
CVE-2023-30709
Improper access control in Dual Messenger prior to SMR Sep-2023 Release 1 allows local attackers launch activity with system privilege...
CVE-2023-30709
Improper access control in Dual Messenger prior to SMR Sep-2023 Release 1 allows local attackers launch activity with system privilege...
CVE-2023-30707
CVE-2023-30707 affects Samsung Keyboard, specifically the FileProviderStatusReceiver component. The root cause is improper input validation, as described in the CVE entry and supported by PT-2023-22907, affecting Samsung Keyboard versions prior to SMR Sep-2023 Release 1. The practical impact is t...
CVE-2023-30707
Improper input validation vulnerability in FileProviderStatusReceiver in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows local attackers to delete arbitrary files with Samsung Keyboard privilege...
PT-2023-22909 · Unknown · Dual Messenger
Name of the Vulnerable Software and Affected Versions: Dual Messenger versions prior to SMR Sep-2023 Release 1 Description: The issue is related to improper access control in Dual Messenger, allowing local attackers to launch activities with system privilege. Recommendations: For versions prior t...
PT-2023-25495 · Gnome +1 · Gnome Time Tracker +1
Name of the Vulnerable Software and Affected Versions: GNOME time tracker version 3.0.2 Description: The issue allows local attackers to execute arbitrary code via a crafted .tsv file when creating a new record. This is a result of a CSV Injection vulnerability in the GNOME time tracker...
