CVSS: 6.2EPSS: 0%CPEs: 1EXPL: 0CVE-2024-34607
https://notcve.org/view.php?id=CVE-2024-34607
07 Aug 2024 — Improper access control in SamsungNotesService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. • https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08 •
CVSS: 6.2EPSS: 0%CPEs: 1EXPL: 0CVE-2024-34606
https://notcve.org/view.php?id=CVE-2024-34606
07 Aug 2024 — Improper access control in SmartThingsService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. • https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08 •
CVSS: 6.2EPSS: 0%CPEs: 1EXPL: 0CVE-2024-34605
https://notcve.org/view.php?id=CVE-2024-34605
07 Aug 2024 — Improper access control in SamsungHealthService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. • https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08 •
CVSS: 6.2EPSS: 0%CPEs: 1EXPL: 0CVE-2024-34604
https://notcve.org/view.php?id=CVE-2024-34604
07 Aug 2024 — Improper access control in LedCoverService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions on starting services from the background. • https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=08 •
CVSS: 5.5EPSS: 0%CPEs: 43EXPL: 0CVE-2024-34603
https://notcve.org/view.php?id=CVE-2024-34603
08 Jul 2024 — Improper access control in Samsung Message prior to SMR Jul-2024 Release 1 allows local attackers to access location data. El control de acceso inadecuado en Samsung Message anterior a SMR Jul-2024 Release 1 permite a atacantes locales acceder a datos de ubicación. • https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=07 •
CVSS: 5.5EPSS: 0%CPEs: 76EXPL: 0CVE-2024-34602
https://notcve.org/view.php?id=CVE-2024-34602
08 Jul 2024 — Use of implicit intent for sensitive communication in Samsung Messages prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability. El uso de intención implícita para comunicaciones confidenciales en Samsung Messages antes de la versión 1 de SMR de julio de 2024 permite a los atacantes locales obtener información confidencial. Se requiere la interacción del usuario para activar esta vulnerabilidad. • https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=07 •
CVSS: 4.0EPSS: 0%CPEs: 2EXPL: 0CVE-2024-34599
https://notcve.org/view.php?id=CVE-2024-34599
02 Jul 2024 — Improper input validation in Tips prior to version 6.2.9.4 in Android 14 allows local attacker to send broadcast with Tips' privilege. La validación de entrada incorrecta en Tips anteriores a la versión 6.2.9.4 en Android 14 permite a un atacante local enviar transmisiones con Tips' privilegio. • https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=07 •
CVSS: 7.8EPSS: 0%CPEs: 76EXPL: 0CVE-2024-34595
https://notcve.org/view.php?id=CVE-2024-34595
02 Jul 2024 — Improper access control in clickAdapterItem of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities. El control de acceso inadecuado en clickAdapterItem de SystemUI anterior a SMR Jul-2024 Release 1 permite a atacantes locales iniciar actividades privilegiadas. • https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=07 •
CVSS: 5.5EPSS: 0%CPEs: 76EXPL: 0CVE-2024-34594
https://notcve.org/view.php?id=CVE-2024-34594
02 Jul 2024 — Exposure of sensitive information in proc file system prior to SMR Jul-2024 Release 1 allows local attackers to read kernel memory address. La exposición de información confidencial en el sistema de archivos proc anterior a SMR Jul-2024 Release 1 permite a atacantes locales leer la dirección de memoria del kernel. • https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=07 •
CVSS: 10.0EPSS: 1%CPEs: 76EXPL: 0CVE-2024-34593
https://notcve.org/view.php?id=CVE-2024-34593
02 Jul 2024 — Improper input validation in parsing and distributing RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability. La validación de entrada inadecuada al analizar y distribuir paquetes RTCP en librtp.so antes de SMR Jul-2024 Release 1 permite a atacantes remotos ejecutar código arbitrario con privilegios del sistema. Se requiere la interacción del usuario para activar esta vul... • https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=07 •