CVE-2023-30736

—

CVSS 3.1

5.4 medium

EPSS

<1%p15

Published

Oct 4, 2023 (Oct 4, 2023)

Modified

Jun 17, 2026

Description

Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute javascript interface. To trigger this vulnerability, user interaction is required.

Vendors: samsung
Products: samsung assistant
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.