Samsung Galaxy Watch Plugin — known CVE vulnerabilities

Every CVE whose affected-product data names Samsung Galaxy Watch Plugin, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2022-36875 — CVSS 6.6 (medium): Improper restriction of broadcasting Intent in SaWebViewRelayActivity of?Waterplugin prior to version 2.2.11.22081151 allows attacker to…
• CVE-2022-36873 — CVSS 5.9 (medium): Improper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior to version 2.2.11.22081151 leaks MAC…
• CVE-2022-36874 — CVSS 5.9 (medium): Improper Handling of Insufficient Permissions or Privileges vulnerability in Waterplugin prior to 2.2.11.22040751 allows attacker to access…
• CVE-2021-25420 — CVSS 5.5 (medium): Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak…
• CVE-2022-25823 — CVSS 1.9 (low): Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.220126741 allows attackers to access user information in…
• CVE-2022-25827 — CVSS 1.9 (low): Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.22012751 allows attacker to access password information…