Samsung Quick Share vulnerabilities

5 CVEs affecting Samsung Quick Share, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-49421, published 2024-12-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-49421, published 2024-12-03. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. Path traversal in Quick Share Agent prior to version 3.5.14.47 in Android 12, 3.5.19.41 in Android 13, and 3.5.19.42 in Android 14 allows adjacent attackers to write file in arbitrary location.
CVE-2022-30745, published 2022-06-07. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control vulnerability in Quick Share prior to version 13.1.2.4 allows attacker to access internal files in Quick Share.
CVE-2022-39860, published 2022-10-07. Low severity, CVSS 3.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control vulnerability in QuickShare prior to version 13.2.3.5 allows attackers to access sensitive information via implicit broadcast.
CVE-2023-42544, published 2023-11-07. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control vulnerability in Quick Share prior to 13.5.52.0 allows local attacker to access local files.
CVE-2023-21462, published 2023-03-16. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local attacker to access MAC address without…