Page 29 of 352 results (0.005 seconds)

CVSS: 6.2EPSS: 0%CPEs: 29EXPL: 0

Improper privilege management vulnerability in Galaxy Themes Service prior to SMR Jul-2023 Release 1 allows local attackers to call privilege function. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07 • CWE-269: Improper Privilege Management •

CVSS: 4.3EPSS: 0%CPEs: 9EXPL: 0

Improper access control vulnerability in Settings prior to SMR Jul-2023 Release 1 allows physical attacker to use restricted user profile to access device owner's google account data. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07 •

CVSS: 4.3EPSS: 0%CPEs: 60EXPL: 0

Improper access control vulnerability in PersonaManagerService prior to SMR Jul-2023 Release 1 allows local attackers to change confiugration. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=07 •

CVSS: 3.3EPSS: 0%CPEs: 57EXPL: 0

Improper Knox ID validation logic in notification framework prior to SMR Jun-2023 Release 1 allows local attackers to read work profile notifications without proper access permission. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=06 • CWE-269: Improper Privilege Management CWE-276: Incorrect Default Permissions •

CVSS: 6.8EPSS: 0%CPEs: 57EXPL: 0

Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physical attackers to manipulate device to operate in way that results in unexpected behavior in CC Mode under specific condition. • https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=06 • CWE-269: Improper Privilege Management •