CVE-2022-28777: Samsung Members

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper access control vulnerability in Samsung Members prior to version 13.6.08.5 allows local attacker to execute call function without CALL_PHONE permission.

Affected products

• Samsung Members: before 13.6.08.5 (fixed in 13.6.08.5)

Published 2022-04-11. Last modified 2026-06-17.