deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-25615
Published: 2022-04-11
Description: Cross-Site Request Forgery (CSRF) in StylemixThemes eRoom – Zoom Meetings & Webinar (WordPress plugin) <= 1.3.8 allows cache deletion.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/vulnerability/eroom-zoom-meetings-webinar/wordpress-eroom-plugin-1-3-8-cross-site-request-forgery-csrf-vulnerability-leading-to-cache-deletion; https://wordpress.org/plugins/eroom-zoom-meetings-webinar/#developers; https://patchstack.com/database/vulnerability/eroom-zoom-meetings-webinar/wordpress-eroom-plugin-1-3-8-cross-site-request-forgery-csrf-vulnerability-leading-to-cache-deletion
CVE: CVE-2022-25789
Published: 2022-04-11
Description: A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005
CVE: CVE-2022-25790
Published: 2022-04-11
Description: A maliciously crafted DWF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated boundaries when parsing the DWF files. Exploitation of this vulnerability may lead to code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005
CVE: CVE-2022-25791
Published: 2022-04-11
Description: A Memory Corruption vulnerability for DWF and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 may lead to code execution through maliciously crafted DLL files.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005
CVE: CVE-2022-25792
Published: 2022-04-11
Description: A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability can be exploited to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005
CVE: CVE-2022-25794
Published: 2022-04-11
Description: An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.2 and prior may lead to code execution through maliciously crafted ActionScript Byte Code 'ABC' files or information disclosure. ABC files are created by the Flash compiler and contain executable code. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0006; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0006
CVE: CVE-2022-25796
Published: 2022-04-11
Description: A Double Free vulnerability allows remote malicious actors to execute arbitrary code on DWF file in Autodesk Navisworks 2022 within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005
CVE: CVE-2022-25831
Published: 2022-04-11
Description: Improper access control vulnerability in S Secure prior to SMR Apr-2022 Release 1 allows physical attackers to access secured data in certain conditions.
CVSS Score: 2.0 (LOW)
CWE: CWE-284
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-25832
Published: 2022-04-11
Description: Improper authentication vulnerability in S Secure prior to SMR Apr-2022 Release 1 allows physical attackers to use locked Myfiles app without authentication.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-25833
Published: 2022-04-11
Description: Improper authentication in ImsService prior to SMR Apr-2022 Release 1 allows attackers to get IMSI without READ_PRIVILEGED_PHONE_STATE permission.
CVSS Score: 3.3 (LOW)
CWE: CWE-287, CWE-287
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-26090
Published: 2022-04-11
Description: Improper access control vulnerability in SamsungContacts prior to SMR Apr-2022 Release 1 allows that attackers can access contact information without permission.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-815
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-26091
Published: 2022-04-11
Description: Improper access control vulnerability in Knox Manage prior to SMR Apr-2022 Release 1 allows that physical attackers can bypass Knox Manage using a function key of hardware keyboard.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-284, CWE-287
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-26092
Published: 2022-04-11
Description: Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows arbitrary code execution.
CVSS Score: 7.4 (HIGH)
CWE: CWE-122, CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-26093
Published: 2022-04-11
Description: Null pointer dereference vulnerability in parser_irot function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-26094
Published: 2022-04-11
Description: Null pointer dereference vulnerability in parser_auxC function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-26095
Published: 2022-04-11
Description: Null pointer dereference vulnerability in parser_colr function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-26096
Published: 2022-04-11
Description: Null pointer dereference vulnerability in parser_ispe function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-26097
Published: 2022-04-11
Description: Null pointer dereference vulnerability in parser_unknown_property function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attacker.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-26098
Published: 2022-04-11
Description: Heap-based buffer overflow vulnerability in sheifd_create function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attackers.
CVSS Score: 8.1 (HIGH)
CWE: CWE-122, CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-26099
Published: 2022-04-11
Description: Null pointer dereference vulnerability in parser_infe function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds read by remote attackers.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27528
Published: 2022-04-11
Description: A maliciously crafted DWFX and SKP files in Autodesk Navisworks 2022 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005; https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005
CVE: CVE-2022-27567
Published: 2022-04-11
Description: Null pointer dereference vulnerability in parser_hvcC function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by remote attackers.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27568
Published: 2022-04-11
Description: Heap-based buffer overflow vulnerability in parser_iloc function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
CVSS Score: 8.1 (HIGH)
CWE: CWE-122, CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27569
Published: 2022-04-11
Description: Heap-based buffer overflow vulnerability in parser_infe function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
CVSS Score: 8.1 (HIGH)
CWE: CWE-122, CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27570
Published: 2022-04-11
Description: Heap-based buffer overflow vulnerability in parser_single_iref function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
CVSS Score: 8.1 (HIGH)
CWE: CWE-122, CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27571
Published: 2022-04-11
Description: Heap-based buffer overflow vulnerability in sheifd_get_info_image function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker.
CVSS Score: 8.1 (HIGH)
CWE: CWE-122, CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27572
Published: 2022-04-11
Description: Heap-based buffer overflow vulnerability in parser_ipma function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attackers.
CVSS Score: 8.1 (HIGH)
CWE: CWE-122, CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27573
Published: 2022-04-11
Description: Improper input validation vulnerability in parser_infe and sheifd_find_itemIndexin fuctions of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by privileged attackers.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20, CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27574
Published: 2022-04-11
Description: Improper input validation vulnerability in parser_iloc and sheifd_find_itemIndexin fuctions of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by privileged attacker.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20, CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27575
Published: 2022-04-11
Description: Information exposure vulnerability in One UI Home prior to SMR April-2022 Release 1 allows to access currently launched foreground app information without permission.
CVSS Score: 3.3 (LOW)
CWE: CWE-200, CWE-863
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27576
Published: 2022-04-11
Description: Information exposure vulnerability in Samsung DeX Home prior to SMR April-2022 Release 1 allows to access currently launched foreground app information without permission
CVSS Score: 3.3 (LOW)
CWE: CWE-200, CWE-668
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27577
Published: 2022-04-11
Description: The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number. When the TCP sequence is predictable, an attacker can send packets that are forged to appear to come from a trusted computer. These forged packets could compromise services on the MSC800. SICK has released a new firmware version of the SICK MSC800 and recommends updating to the newest version.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-342, CWE-330
References: https://sick.com/psirt; https://sick.com/psirt
CVE: CVE-2022-27578
Published: 2022-04-11
Description: An attacker can perform a privilege escalation through the SICK OEE if the application is installed in a directory where non authenticated or low privilege users can modify its content.
CVSS Score: 7.8 (HIGH)
CWE: CWE-250
References: https://sick.com/psirt; https://sick.com/psirt
CVE: CVE-2022-27821
Published: 2022-04-11
Description: Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of service via crafted image file.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27822
Published: 2022-04-11
Description: Information exposure vulnerability in ril property setting prior to SMR April-2022 Release 1 allows access to EF_RUIMID value without permission.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-284, CWE-668
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27823
Published: 2022-04-11
Description: Improper size check in sapefd_parse_meta_HEADER_old function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27824
Published: 2022-04-11
Description: Improper size check of in sapefd_parse_meta_DESCRIPTION function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27825
Published: 2022-04-11
Description: Improper size check in sapefd_parse_meta_HEADER function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27826
Published: 2022-04-11
Description: Improper validation vulnerability in SemSuspendDialogInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27827
Published: 2022-04-11
Description: Improper validation vulnerability in MediaMonitorDimension prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27828
Published: 2022-04-11
Description: Improper validation vulnerability in MediaMonitorEvent prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27829
Published: 2022-04-11
Description: Improper validation vulnerability in VerifyCredentialResponse prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27830
Published: 2022-04-11
Description: Improper validation vulnerability in SemBlurInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27831
Published: 2022-04-11
Description: Improper boundary check in sflvd_rdbuf_bits of libsflvextractor prior to SMR Apr-2022 Release 1 allows attackers to read out of bounds memory.
CVSS Score: 2.9 (LOW)
CWE: CWE-125, CWE-125
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27832
Published: 2022-04-11
Description: Improper boundary check in media.extractor library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of service via a crafted media file.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27833
Published: 2022-04-11
Description: Improper input validation in DSP driver prior to SMR Apr-2022 Release 1 allows out-of-bounds write by integer overflow.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20, CWE-190
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27834
Published: 2022-04-11
Description: Use after free vulnerability in dsp_context_unload_graph function of DSP driver prior to SMR Apr-2022 Release 1 allows attackers to perform malicious actions.
CVSS Score: 2.9 (LOW)
CWE: CWE-367, CWE-416
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27835
Published: 2022-04-11
Description: Improper boundary check in UWB firmware prior to SMR Apr-2022 Release 1 allows arbitrary memory write.
CVSS Score: 7.6 (HIGH)
CWE: CWE-20, CWE-787
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27836
Published: 2022-04-11
Description: Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 allow local attackers to access arbitrary system files without a proper permission. The patch adds proper validation logic to prevent arbitrary files access.
CVSS Score: 8.4 (HIGH)
CWE: CWE-284, CWE-22, CWE-863
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4
CVE: CVE-2022-27837
Published: 2022-04-11
Description: A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R(11.0) and 13.0.1.1 in Android S(12.0) allows attacker to access the file with system privilege.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-94, CWE-552
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2
CVE: CVE-2022-27838
Published: 2022-04-11
Description: Improper access control vulnerability in FactoryCamera prior to version 2.1.96 allows attacker to access the file with system privilege.
CVSS Score: 7.7 (HIGH)
CWE: CWE-284
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE: CVE-2022-27839
Published: 2022-04-11
Description: Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab without proper credentials.
CVSS Score: 3.3 (LOW)
CWE: CWE-287, CWE-287
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE: CVE-2022-27840
Published: 2022-04-11
Description: Improper access control vulnerability in SamsungRecovery prior to version 8.1.43.0 allows local attckers to delete arbitrary files as SamsungRecovery permission.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-269, CWE-276
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE: CVE-2022-27841
Published: 2022-04-11
Description: Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that is previously running without authentication
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-703, CWE-755
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE: CVE-2022-27842
Published: 2022-04-11
Description: DLL hijacking vulnerability in Smart Switch PC prior to version 4.2.22022_4 allows attacker to execute abitrary code.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20, CWE-427
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4
CVE: CVE-2022-27843
Published: 2022-04-11
Description: DLL hijacking vulnerability in Kies prior to version 2.6.4.22014_2 allows attacker to execute abitrary code.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20, CWE-427
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=4