CVE-2022-39910: Samsung Pass

Medium severity, CVSS 4.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data of Samsung Pass on a certain state of an unlocked device using pop-up view.

Affected products

• Samsung Pass: before 4.0.06.7 (fixed in 4.0.06.7)

Published 2022-12-08. Last modified 2026-06-17.