Samsung Galaxy Store App Found Vulnerable to Sneaky App Installs and Fraud

Two security flaws have been disclosed in Samsung's Galaxy Store app for Android that could be exploited by a local attacker to stealthily install arbitrary apps or direct prospective victims to fraudulent landing pages on the web. The issues, tracked as CVE-2023-21433 and CVE-2023-21434, were...

CVE-2015-0863

CVE-2015-0863 concerns Samsung GALAXY Apps (aka Samsung Apps, Samsung Updates, or com.sec.android.app.samsungapps). Multiple sources confirm a vulnerability in versions before 14120405.03.012 that enables man‑in‑the‑middle (MITM) attacks to both obtain sensitive information and execute arbitrary ...

PT-2013-6304

Name of the Vulnerable Software and Affected Versions Samsung Apps/WatchON version affected versions not specified Description The issue concerns a remote code execution vulnerability in the JavaScript Bridge of the WebView component. This vulnerability was demonstrated at the Mobile Pwn2Own even...