CVE-2022-28778: Samsung Security Supporter

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper access control vulnerability in Samsung Security Supporter prior to version 1.2.40.0 allows attacker to set the arbitrary folder as Secret Folder without Samsung Security Supporter permission

Affected products

• Samsung Samsung Security Supporter: before 1.2.40.0 (fixed in 1.2.40.0)

Published 2022-04-11. Last modified 2026-06-17.