CVE-2023-42547

MEDIUM

Samsung Account < 14.5.00.7 - Exposure to Wrong Actor

Title source: rule

Description

Use of implicit intent for sensitive communication vulnerability in startEmailValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.

References (1)

[Vendor Advisory] https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11

Scores

CVSS v3 5.5

EPSS 0.0012

EPSS Percentile 31.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Classification

CWE

CWE-668

Status published

Affected Products (1)

samsung/account < 14.5.00.7

Timeline

Published Nov 07, 2023

Tracked Since Feb 18, 2026