CVE-2023-30642
https://notcve.org/view.php?id=CVE-2023-30642
Improper privilege management vulnerability in Galaxy Themes Service prior to SMR Jul-2023 Release 1 allows local attackers to call privilege function. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07 • CWE-269: Improper Privilege Management •
CVE-2023-30641
https://notcve.org/view.php?id=CVE-2023-30641
Improper access control vulnerability in Settings prior to SMR Jul-2023 Release 1 allows physical attacker to use restricted user profile to access device owner's google account data. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07 •
CVE-2023-30640
https://notcve.org/view.php?id=CVE-2023-30640
Improper access control vulnerability in PersonaManagerService prior to SMR Jul-2023 Release 1 allows local attackers to change confiugration. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07 •
CVE-2023-21512
https://notcve.org/view.php?id=CVE-2023-21512
Improper Knox ID validation logic in notification framework prior to SMR Jun-2023 Release 1 allows local attackers to read work profile notifications without proper access permission. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=06 • CWE-269: Improper Privilege Management CWE-276: Incorrect Default Permissions •
CVE-2023-21513
https://notcve.org/view.php?id=CVE-2023-21513
Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physical attackers to manipulate device to operate in way that results in unexpected behavior in CC Mode under specific condition. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=06 • CWE-269: Improper Privilege Management •