Samsung Email vulnerabilities

5 CVEs affecting Samsung Email, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-36864, published 2022-09-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-10498, published 2018-09-24. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Samsung Email Fixed in version 5.0.02.16. An attacker must first obtain the ability to…
CVE-2018-10497, published 2018-09-24. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Email Fixed in version 5.0.02.16. An attacker must first obtain the ability to execute…
CVE-2022-22287, published 2022-01-10. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Abitrary file access vulnerability in Samsung Email prior to 6.1.60.16 allows attacker to read isolated data in sandbox.
CVE-2022-36837, published 2022-08-05. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Intent redirection vulnerability using implicit intent in Samsung email prior to version 6.1.70.20 allows attacker to get sensitive information.
CVE-2022-36864, published 2022-09-09. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control and intent redirection in Samsung Email prior to 6.1.70.20 allows attacker to access specific formatted file and execute privileged behavior.