Vulnerabilities (CVE)

Filtered by vendor Samsung Subscribe
Filtered by product Galaxy Store
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-42581 1 Samsung 1 Galaxy Store 2023-12-12 N/A 7.5 HIGH
Improper URL validation from InstantPlay deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to access data.
CVE-2022-22288 1 Samsung 1 Galaxy Store 2022-01-19 5.0 MEDIUM 7.5 HIGH
Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist.