CVE-2023-21433

—

CVSS 3.1

7.8 high

EPSS

4%p89

Published

Feb 9, 2023 (Feb 9, 2023)

Modified

Jun 17, 2026

Description

Improper access control vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to install applications from Galaxy Store.

Vendors: samsung
Products: galaxy store
Weakness: CWE-285, CWE-276
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.7%)

In the news2 stories

Samsung Galaxy Store App Found Vulnerable to Sneaky App Installs and Fraud

The Hacker NewsJan 24, 03:37 UTC · Jan 24, 2023Phishing & fraud CVE-2023-21433 CVE-2023-21434

35

Two Vulnerabilities Found in Galaxy App Store

Infosecurity MagazineJan 23, 17:00 UTC · Jan 23, 2023Vulnerability CVE-2023-21433 CVE-2023-21434

35