CVE-2023-21463

low-risk
Published 2023-03-16

Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in Android 12 and 14.1.03.0 in Android 13 allows local attacker to get sensitive information of secret mode in Samsung Internet application with specific conditions.

Do I need to act?

-
0.06% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
4
CVSS 4.0/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Myfiles

Affected Vendors

Samsung

References (2)

Vendor Advisory https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03
Vendor Advisory https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03
19
/ 100
low-risk
Severity 14/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal