CVE-2022-24923

CVE-2022-24923 affects Samsung SearchWidget prior to 2.3.00.6 on China models. Root cause: improper access control that allows untrusted applications to load arbitrary URLs and local files in a webview. Affected version range: before 2.3.00.6. Remediation: update to version 2.3.00.6 or later. Not...

CVE-2023-21518

CVE-2023-21518 affects Samsung SearchWidget prior to v3.3. The vulnerability is due to improper access control that allows untrusted applications to start arbitrary activities, with local attack vector and high impact to confidentiality, integrity, and availability as described in the sources. Re...