Samsung Reminder vulnerabilities

3 CVEs affecting Samsung Reminder, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-39876, published 2022-10-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-23433, published 2022-02-11. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. Improper access control vulnerability in Reminder prior to versions 12.3.01.3000 in Android S(12), 12.2.05.6000 in Android R(11) and 11.6.08.6000 in Andoid Q(10) allows attackers to register…
CVE-2022-22285, published 2022-01-10. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Android S(12.0) allows attackers to execute privileged action by hijacking and…
CVE-2022-39876, published 2022-10-07. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Insertion of Sensitive Information into Log in PushRegIdUpdateClient of SReminder prior to 8.2.01.13 allows attacker to access device IMEI.