CVE-2022-36830mediumCWE-927

CVE-2022-36830: medium-severity vulnerability in Samsung Mobile Charm by Samsung

Published · Updated

Follow this CVE+ Monitor Charm by Samsung

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.2epss 0.2%
PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via implicit intent.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Samsung Mobile · Charm by Samsung
Related CVEs — Samsung Mobile Charm by Samsung

In the same product, most dangerous first.

CVE-2022-36836MEDIUMCVE-2022-36836EPSS 0.2%CVE-2022-33734MEDIUMCVE-2022-33734EPSS 0.2%CVE-2022-33733MEDIUMCVE-2022-33733EPSS 0.2%CVE-2022-36829MEDIUMCVE-2022-36829EPSS 0.2%