Samsung Group Sharing vulnerabilities

5 CVEs affecting Samsung Group Sharing, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-34659, published 2024-09-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-34659, published 2024-09-04. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. Exposure of sensitive information in GroupSharing prior to version 13.6.13.3 allows remote attackers can force the victim to join the group.
CVE-2022-39877, published 2022-10-07. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. Improper access control vulnerability in ProfileSharingAccount in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to identify the…
CVE-2021-25504, published 2021-11-05. Medium severity, CVSS 4.0. EPSS: 0.2% chance of exploitation in the next 30 days. Intent redirection vulnerability in Group Sharing prior to 10.8.03.2 allows attacker to access contact information.
CVE-2022-36866, published 2022-09-09. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to identify the device.
CVE-2022-36865, published 2022-09-09. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to access device information.