CVE-2023-21463: Samsung Myfiles

Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days.

Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in Android 12 and 14.1.03.0 in Android 13 allows local attacker to get sensitive information of secret mode in Samsung Internet application with specific conditions.

Affected products

• Samsung Myfiles: before 12.2.09.0 (fixed in 12.2.09.0); before 13.1.03.501 (fixed in 13.1.03.501); before 14.1.03.0 (fixed in 14.1.03.0)

Published 2023-03-16. Last modified 2026-06-17.