Samsung Galaxy Apps vulnerabilities

4 CVEs affecting Samsung Galaxy Apps, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-20135, published 2019-06-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-20135, published 2019-06-07. High severity, CVSS 8.1. EPSS: 1.8% chance of exploitation in the next 30 days. Samsung Galaxy Apps before 4.4.01.7 allows modification of the hostname used for load balancing on installations of applications through a man-in-the-middle attack. An attacker may trick Galaxy Apps…
CVE-2018-10499, published 2018-09-24. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy Apps Fixed in version 6.4.0.15. An attacker must first obtain the ability to execute…
CVE-2018-10502, published 2018-09-24. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Galaxy Apps Fixed in version 4.2.18.2. An attacker must first obtain the ability to execute…
CVE-2018-10500, published 2018-09-24. High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days. This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Galaxy Apps Fixed in version 6.4.0.15. An attacker must first obtain the ability to execute…