CVE-2023-21434

—

CVSS 3.1

6.1 medium

EPSS

13%p96

Published

Feb 9, 2023 (Feb 9, 2023)

Modified

Jun 17, 2026

Description

Improper input validation vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to execute JavaScript by launching a web page.

Vendors: samsung
Products: galaxy store
Weakness: CWE-20, CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (12.9%)

In the news2 stories

Samsung Galaxy Store App Found Vulnerable to Sneaky App Installs and Fraud

The Hacker NewsJan 24, 03:37 UTC · Jan 24, 2023Phishing & fraud CVE-2023-21433 CVE-2023-21434

Two Vulnerabilities Found in Galaxy App Store

Infosecurity MagazineJan 23, 17:00 UTC · Jan 23, 2023Vulnerability CVE-2023-21433 CVE-2023-21434