VULNERABILITY INTELLIGENCE

CVE-2023-21463

CVSS score4 MEDIUM
EPSS probability0.15%
CISA KEVNot currently listed
Published2023-03-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in Android 12 and 14.1.03.0 in Android 13 allows local attacker to get sensitive information of secret mode in Samsung Internet application with specific conditions.

Weakness classification

  • mobile.security@samsung.com: CWE-284
  • nvd@nist.gov: NVD-CWE-Other

Primary references