Vulnerabilities (CVE)

Filtered by CWE-284
Total 7826 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-39896 1 Google 1 Android 2026-06-17 N/A 4.0 MEDIUM
Improper access control vulnerabilities in Contacts prior to SMR Dec-2022 Release 1 allows to access sensitive information via implicit intent.
CVE-2022-39895 1 Google 1 Android 2026-06-17 N/A 4.0 MEDIUM
Improper access control vulnerability in ContactListUtils in Phone prior to SMR Dec-2022 Release 1 allows to access contact group information via implicit intent.
CVE-2022-39894 1 Google 1 Android 2026-06-17 N/A 4.0 MEDIUM
Improper access control vulnerability in ContactListStartActivityHelper in Phone prior to SMR Dec-2022 Release 1 allows to access sensitive information via implicit intent.
CVE-2022-39889 1 Samsung 1 Galaxywatch4plugin 2026-06-17 N/A 4.0 MEDIUM
Improper access control vulnerability in GalaxyWatch4Plugin prior to versions 2.2.11.22101351 and 2.2.12.22101351 allows attackers to access wearable device information.
CVE-2022-39887 1 Google 1 Android 2026-06-17 N/A 4.3 MEDIUM
Improper access control vulnerability in clearAllGlobalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local attacker to configure EDM setting.
CVE-2022-39884 1 Google 1 Android 2026-06-17 N/A 4.3 MEDIUM
Improper access control vulnerability in IImsService prior to SMR Nov-2022 Release 1 allows local attacker to access to Call information.
CVE-2022-39878 1 Samsung 1 Checkout 2026-06-17 N/A 4.0 MEDIUM
Improper access control vulnerability in Samsung Checkout prior to version 5.0.55.3 allows attackers to access sensitive information via implicit intent broadcast.
CVE-2022-39877 2 Google, Samsung 2 Android, Group Sharing 2026-06-17 N/A 4.0 MEDIUM
Improper access control vulnerability in ProfileSharingAccount in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to identify the device.
CVE-2022-39875 1 Samsung 1 Account 2026-06-17 N/A 5.1 MEDIUM
Improper component protection vulnerability in Samsung Account prior to version 13.5.0 allows attackers to unauthorized logout.
CVE-2022-39871 1 Samsung 1 Smartthings 2026-06-17 N/A 4.0 MEDIUM
Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcasts.
CVE-2022-39870 1 Samsung 1 Smartthings 2026-06-17 N/A 4.0 MEDIUM
Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via PUSH_MESSAGE_RECEIVED broadcast.
CVE-2022-39869 1 Samsung 1 Smartthings 2026-06-17 N/A 4.0 MEDIUM
Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via REMOVE_PERSISTENT_BANNER broadcast.
CVE-2022-39868 1 Samsung 1 Smartthings 2026-06-17 N/A 4.0 MEDIUM
Improper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast.
CVE-2022-39867 1 Samsung 1 Smartthings 2026-06-17 N/A 4.0 MEDIUM
Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via SHOW_PERSISTENT_BANNER broadcast.
CVE-2022-39866 1 Samsung 1 Smartthings 2026-06-17 N/A 4.0 MEDIUM
Improper access control vulnerability in RegisteredEventMediator.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast.
CVE-2022-39865 1 Samsung 1 Smartthings 2026-06-17 N/A 4.0 MEDIUM
Improper access control vulnerability in ContentsSharingActivity.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information via implicit broadcast.
CVE-2022-39864 1 Samsung 1 Smartthings 2026-06-17 N/A 3.3 LOW
Improper access control vulnerability in WifiSetupLaunchHelper in SmartThings prior to version 1.7.89.25 allows attackers to access sensitive information via implicit intent.
CVE-2022-39860 1 Samsung 1 Quick Share 2026-06-17 N/A 4.4 MEDIUM
Improper access control vulnerability in QuickShare prior to version 13.2.3.5 allows attackers to access sensitive information via implicit broadcast.
CVE-2022-39857 1 Samsung 1 Factorycamerafb 2026-06-17 N/A 7.3 HIGH
Improper access control vulnerability in CameraTestActivity in FactoryCameraFB prior to version 3.5.51 allows attackers to access broadcasting Intent as system uid privilege.
CVE-2022-39855 1 Google 1 Android 2026-06-17 N/A 5.1 MEDIUM
Improper access control vulnerability in FACM application prior to SMR Oct-2022 Release 1 allows a local attacker to connect arbitrary AP and Bluetooth devices.