CVE-2023-42572: Samsung Account Web Software Development Kit

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information.

Affected products

• Samsung Account Web Software Development Kit: before 1.5.24 (fixed in 1.5.24)

Published 2023-12-05. Last modified 2026-06-17.