Use of Implicit Intent for Sensitive Communication in Samsung Pay prior to version 5.4.99 allows local attackers to access information of Samsung Pay.
Search vulnerabilities
CVE-2024-20850
CVSS 3.1 · 6.2 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2022-36872
Pending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.
CVSS 3.1 · 5 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2022-36871
Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.
CVSS 3.1 · 5 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2022-36870
Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent.
CVSS 3.1 · 5 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.