Design/Logic Flaw

Use of implicit intent for sensitive communication vulnerability in startNameValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...

CVE-2023-42555

CVE-2023-42555 concerns Samsung EasySetup prior to version 11.1.13, where use of implicit intents for sensitive communications exposes the device’s Bluetooth address. The vulnerability arises from the sensitive data being handled via an implicit inter-process communication path, enabling a local ...

CVE-2023-42555

Use of implicit intent for sensitive communication vulnerability in EasySetup prior to version 11.1.13 allows attackers to get the bluetooth address of user device...

CVE-2023-42551

Samsung Account contains a vulnerability in startTncActivity where implicit intents enable access to arbitrary files with Samsung Account privileges. Affected versions are prior to 14.5.00.7. The issue stems from how sensitive communications are handled, potentially allowing local attackers to re...

CVE-2023-42551

Use of implicit intent for sensitive communication vulnerability in startTncActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...

CVE-2023-42550

Use of implicit intent for sensitive communication vulnerability in startSignIn in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...

CVE-2023-42550

CVE-2023-42550 concerns Samsung Account: vulnerable in startSignIn prior to version 14.5.00.7 due to use of an implicit intent for sensitive communication, enabling an attacker with Samsung Account privileges to access arbitrary files. Documents describe the affected component as the Samsung Acco...

CVE-2023-42550

Use of implicit intent for sensitive communication vulnerability in startSignIn in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...

CVE-2023-42549

Use of implicit intent for sensitive communication vulnerability in startNameValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...

CVE-2023-42549

Mode C: CVE-2023-42549 affects Samsung Account prior to 14.5.00.7. The vulnerability arises from use of an implicit intent in startNameValidationActivity, enabling an attacker with Samsung Account privileges to access arbitrary files. Public exploitation details are not provided in the supplied d...

CVE-2023-42548

Use of implicit intent for sensitive communication vulnerability in startMandatoryCheckActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...

CVE-2023-42548

Use of implicit intent for sensitive communication vulnerability in startMandatoryCheckActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...

CVE-2023-42548

The CVE-2023-42548 entry concerns Samsung Account (startMandatoryCheckActivity). Affected software: Samsung Account versions prior to 14.5.00.7. Issue: use of an implicit intent for sensitive communications, enabling an attacker to access arbitrary files using Samsung Account privileges. Impact: ...

CVE-2023-42547

Use of implicit intent for sensitive communication vulnerability in startEmailValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...

CVE-2023-42547

Use of implicit intent for sensitive communication vulnerability in startEmailValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...

CVE-2023-42547

Samsung Account before version 14.5.00.7 is affected by CVE-2023-42547 due to use of an implicit intent in startEmailValidationActivity that enables access to arbitrary files with Samsung Account privileges. Affected software: Samsung Account (prior to 14.5.00.7). Root cause: implicit intent hand...

CVE-2023-42546

Use of implicit intent for sensitive communication vulnerability in startAgreeToDisclaimerActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...

CVE-2023-42546

CVE-2023-42546 concerns Samsung Account, specifically the startAgreeToDisclaimerActivity. The issue is the use of an implicit intent for sensitive communication, enabling an attacker with Samsung Account privileges to access arbitrary files. Affected version: Samsung Account prior to 14.5.00.7. R...

CVE-2023-42546

Use of implicit intent for sensitive communication vulnerability in startAgreeToDisclaimerActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege...

CVE-2023-42545

Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13 allows attackers to access location data...