CVE-2022-36877: Samsung Members

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global and 14.0.02.4 in China allows local attackers to access device identification via log.

Affected products

• Samsung Samsung Members: before 4.3.00.11 (fixed in 4.3.00.11); before 14.0.02.4 (fixed in 14.0.02.4)

Published 2022-09-09. Last modified 2026-06-17.