Seunghyun Cho

**Name of the Vulnerable Software and Affected Versions** Samsung Keyboard versions prior to One UI 5.1.1 **Description** The issue is related to an improper authorization vulnerability that allows physical attackers to partially bypass the factory reset protection. This vulnerability can be exploited by physical attackers. **Recommendations** For versions prior to One UI 5.1.1, update to version One UI 5.1.1 or later to resolve the issue. As a temporary workaround, consider restricting physical access to devices until the update can be applied.

**Name of the Vulnerable Software and Affected Versions** Contents To Window versions prior to SMR May-2022 Release 1 **Description** The issue is related to improper access control, allowing a physical attacker to install a package before the completion of the Setup wizard. This can be exploited by a physical attacker. **Recommendations** For versions prior to SMR May-2022 Release 1, apply the patch that blocks the entry point of the vulnerability to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Setup wizard versions prior to SMR Mar-2022 Release 1 **Description** The issue is related to an Improper Protection of Alternate Path vulnerability in the Setup wizard process. This vulnerability allows a physical attacker to install packages before finishing the Setup wizard. **Recommendations** For versions prior to SMR Mar-2022 Release 1, update to SMR Mar-2022 Release 1 or later to resolve the issue.