CVE-2022-22288: Samsung Galaxy Store

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist.

Affected products

• Samsung Galaxy Store: before 4.5.36.5 (fixed in 4.5.36.5)

Published 2022-01-10. Last modified 2026-06-17.