4.6
Medium
CVE-2024-49407 Improper access control in Samsung Flow prior to version 4.9.15.7 allows physical attackers to access data across…
Description
Improper access control in Samsung Flow prior to version 4.9.15.7 allows physical attackers to access data across multiple user profiles.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Samsung Flow 4.9 | earliest → < 4.9.15.7 | 4.9.15.7 |
Other CVEs of Samsung Flow
The 11 CVEs of Samsung Flow →
CVE-2026-21134
Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive…
6.1
Medium
CVE-2026-21133
Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data
5.1
Medium
CVE-2026-21131
Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary…
2.1
Low
CVE-2025-20972
Improper verification of intent by broadcast receiver in Samsung Flow prior to version 4.9.17.6 allows local attackers…
6.2
Medium