Samsung Searchwidget vulnerabilities

2 CVEs affecting Samsung Searchwidget, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-21518, published 2023-06-28.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-24923, published 2022-02-11. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control vulnerability in Samsung SearchWidget prior to versions 2.3.00.6 in China models allows untrusted applications to load arbitrary URL and local files in webview.
• CVE-2023-21518, published 2023-06-28. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control vulnerability in SearchWidget prior to version 3.3 in China models allows untrusted applications to start arbitrary activity.