CVE-2018-9140: Samsung Mobile

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

On Samsung mobile devices with M(6.0) software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribute, aka SVE-2017-10747.

Affected products

• Samsung Samsung Mobile: version 6.0 only

Published 2018-03-30. Last modified 2026-06-17.