Samsung Account App vulnerabilities

2 CVEs affecting Samsung Account App, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-0864, published 2017-03-27.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-0864, published 2017-03-27. High severity, CVSS 8.0. EPSS: 0.8% chance of exploitation in the next 30 days. Samsung Account (AKA com.osp.app.signin) before 1.6.0069 and 2.x before 2.1.0069 allows man-in-the-middle attackers to obtain sensitive information and execute arbitrary code.
• CVE-2015-0863, published 2017-03-27. High severity, CVSS 8.0. EPSS: 0.7% chance of exploitation in the next 30 days. GALAXY Apps (aka Samsung Apps, Samsung Updates, or com.sec.android.app.samsungapps) before 14120405.03.012 allows man-in-the-middle attackers to obtain sensitive information and execute arbitrary…