PT-2022-23639 · Samsung · Samsung Internet Browser

Published 2022-08-05 · Updated 2022-10-27 · CVE-2022-36835

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samsung Internet Browser versions prior to 17.0.7.34

Description The issue allows attackers to access arbitrary files through an Implicit Intent hijacking vulnerability.

Recommendations For versions prior to 17.0.7.34, update to version 17.0.7.34 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2022-36835

Affected Products

Samsung Internet Browser

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-36835 · Security Note
• https://osv.dev/vulnerability/CVE-2022-36835 · Vendor Advisory
• https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=08 · Vendor Advisory
• https://t.me/cvenotify/36159 · Telegram Post
• https://t.me/cvenotify/34626 · Telegram Post