Skip to main content

Samsung Pay

4 CVEs product

Monthly

CVE-2024-20850 MEDIUM This Month

Use of Implicit Intent for Sensitive Communication in Samsung Pay prior to version 5.4.99 allows local attackers to access information of Samsung Pay. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Samsung Samsung Pay
NVD
CVSS 3.1
5.5
EPSS
0.1%
CVE-2022-36872 MEDIUM This Month

Pending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Samsung Samsung Pay Samsung Pay Kr
NVD
CVSS 3.1
6.5
EPSS
0.2%
CVE-2022-36871 MEDIUM This Month

Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Samsung Samsung Pay Samsung Pay Kr
NVD
CVSS 3.1
6.5
EPSS
0.2%
CVE-2022-36870 MEDIUM This Month

Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Samsung Samsung Pay Samsung Pay Kr
NVD
CVSS 3.1
6.5
EPSS
0.2%
EPSS 0% CVSS 5.5
MEDIUM This Month

Use of Implicit Intent for Sensitive Communication in Samsung Pay prior to version 5.4.99 allows local attackers to access information of Samsung Pay. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Samsung Samsung Pay
NVD
EPSS 0% CVSS 6.5
MEDIUM This Month

Pending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Samsung Samsung Pay +1
NVD
EPSS 0% CVSS 6.5
MEDIUM This Month

Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Samsung Samsung Pay +1
NVD
EPSS 0% CVSS 6.5
MEDIUM This Month

Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via. Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Samsung Samsung Pay +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy