459 matches found
CVE-2023-30716
CVE-2023-30716 affects SVCAgent prior to Samsung SMR Sep-2023 Release 1. Root cause is improper access control that can allow an attacker with local access to trigger certain commands. Impact is described as enabling command execution under local, low-complexity conditions. Remediation per connec...
CVE-2023-30716
Improper access control vulnerability in SVCAgent prior to SMR Sep-2023 Release 1 allows attackers to trigger certain commands...
CVE-2023-30715
Improper access control vulnerability in Weather prior to SMR Sep-2023 Release 1 allows attackers to access location information set in Weather without permission...
CVE-2023-30715
CVE-2023-30715 is an improper access control vulnerability in Weather prior to Samsung SMR Sep-2023 Release 1, enabling local attackers to access location information stored in Weather without permission. Affected scope centers on Weather components in Samsung Mobile devices; root cause is inadeq...
CVE-2023-30714
Improper authorization vulnerability in FolderContainerDragDelegate in One UI Home prior to SMR Sep-2023 Release 1 allows physical attackers to change some settings of the folder lock...
CVE-2023-30714
The CVE-2023-30714 issue affects Samsung One UI Home’s FolderContainerDragDelegate. It is an improper authorization vulnerability that, with physical access, permits changing some folder lock settings. Root cause: inadequate authorization checks in the FolderContainerDragDelegate component. Impac...
CVE-2023-30713
The CVE-2023-30713 entry describes an improper privilege management vulnerability in Samsung One UI Home’s FolderLockNotifier. Affected component: FolderLockNotifier (One UI Home) prior to SMR Sep-2023 Release 1. Root cause: insufficient privilege controls allow local attackers to modify some fol...
CVE-2023-30713
Improper privilege management vulnerability in FolderLockNotifier in One UI Home prior to SMR Sep-2023 Release 1 allows local attackers to change some settings of the folder lock...
CVE-2023-30712
Improper input validation in Settings Suggestions prior to SMR Sep-2023 Release 1 allows attackers to launch arbitrary activity...
CVE-2023-30712
The CVE-2023-30712 vulnerability is reported for Samsung Mobile devices, arising from improper input validation in Settings Suggestions before SMR Sep-2023 Release 1. It allows an attacker with local access to trigger arbitrary activity via the Settings Suggestions component (root cause: input va...
CVE-2023-30712
Improper input validation in Settings Suggestions prior to SMR Sep-2023 Release 1 allows attackers to launch arbitrary activity...
CVE-2023-30711
Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider...
CVE-2023-30711
Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider...
CVE-2023-30711
Technical details (affected products, versions, exploit information, and fixes) are not publicly provided in the supplied documents. Monitor for updates from Samsung and vendors for a confirmed fix and impact.
CVE-2023-30710
CVE-2023-30710 affects Samsung Knox AI prior to the SMR Sep-2023 Release 1. The issue is an improper input validation vulnerability that enables local attackers with low privileges and no user interaction to gain privileged activities on affected devices. The root cause is input validation weakne...
CVE-2023-30709
Improper access control in Dual Messenger prior to SMR Sep-2023 Release 1 allows local attackers launch activity with system privilege...
CVE-2023-30709
CVE-2023-30709 concerns Samsung Dual Messenger: improper access control in prior to SMR Sep-2023 Release 1 allows local attackers to launch activities with system privileges. Affected software is Samsung Mobile firmware with Dual Messenger; root cause is insufficient access controls between conte...
CVE-2023-30709
Improper access control in Dual Messenger prior to SMR Sep-2023 Release 1 allows local attackers launch activity with system privilege...
CVE-2023-30708
CVE-2023-30708 concerns Samsung devices’ SecSettings prior to SMR Sep-2023 Release 1. The issue is described as an improper authentication flaw that allows an attacker to access the Captive Portal Wi‑Fi while the device is in Reactivation Lock status. Concrete details across connected sources ind...
CVE-2023-30707
Improper input validation vulnerability in FileProviderStatusReceiver in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows local attackers to delete arbitrary files with Samsung Keyboard privilege...