7.5
Élevée
CVE-2023-42581 Improper URL validation from InstantPlay deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to…
Description
Improper URL validation from InstantPlay deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to access data.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Galaxy Store 4.5 | premières → < 4.5.64.4 | 4.5.64.4 |
| galaxy_store | 4.5.64.4 | Pas de correctif indiqué |
Autres CVE de Galaxy Store
Les 29 CVE de Galaxy Store →
CVE-2026-21002
Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to…
5.9
Moyenne
CVE-2026-21001
Path traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store…
5.9
Moyenne
CVE-2026-21000
Improper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store…
7.0
Élevée
CVE-2026-20976
Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script
5.1
Moyenne