Design/Logic Flaw

This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Samsung Members Fixed in version 2.4.25. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

CVE-2018-11614

This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Samsung Members Fixed in version 2.4.25. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

CVE-2018-11614

CVE-2018-11614 affects Samsung Members. The flaw is in Intent handling that allows a reachable-intent to escalate privileges from a low-privilege context. A remote attacker with initial low-privilege code execution can escalate to protected resources. The advisory trail includes ZDI-18-562 and mu...