4.4
Medium
CVE-2023-30736 Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute…
Description
Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute javascript interface. To trigger this vulnerability, user interaction is required.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Samsung Assistant 8.7 | earliest → < 8.7.00.1 | 8.7.00.1 |
Other CVEs of Samsung Assistant
The 5 CVEs of Samsung Assistant →
CVE-2026-21033
Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to version…
6.9
Medium
CVE-2026-21032
Improper export of android application components in SmartHomeWidgetReceiver of Samsung Assistant prior to version…
6.9
Medium
CVE-2026-20993
Improper export of android application components in Samsung Assistant prior to version 9.3.10.7 allows local attacker…
4.8
Medium
CVE-2024-34661
Improper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7 allows remote attackers…
4.3
Medium