VDB
CVE-2022-23999
CVE-2022-23999
PUBLISHED
CVSS 3.9000000953674316 LOW
PendingIntent hijacking vulnerability in CpaReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent.
EPSS 0.12% · 1.9th percentile
Risk Scores
CVSS 3.1
3.9000000953674316
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
EPSS Score
0.12%
1.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| android | 10.0, 11.0, 12.0 | |
| Samsung Mobile | Samsung Mobile Devices | Q(10), R(11), S(12) |
Timeline
- Feb 11, 2022 CVE Published
- Feb 12, 2022 EPSS Score
- Apr 5, 2022 EPSS Score
- May 28, 2022 EPSS Score
- Jul 20, 2022 EPSS Score
- Sep 10, 2022 EPSS Score
- Nov 2, 2022 EPSS Score
- Dec 24, 2022 EPSS Score
- Feb 14, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 8, 2023 EPSS Score
- May 30, 2023 EPSS Score