Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2567▼ 300 respecto a la semana anterior
Críticas / altas1352▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (5.3) | 0.46% | — | Samsung Group Sharing | 4/9/2024 | 17/6/2026 | Exposure of sensitive information in GroupSharing prior to version 13.6.13.3 allows remote attackers can force the victim to join the group. | |
| Modificada | Media (5.3) | 0.36% | — | Samsung Group Sharing | 7/10/2022 | 17/6/2026 | Improper access control vulnerability in ProfileSharingAccount in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to identify the device. | |
| Modificada | Baja (3.3) | 0.18% | — | Samsung Group Sharing | 9/9/2022 | 17/6/2026 | Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to identify the device. | |
| Modificada | Baja (3.3) | 0.18% | — | Samsung Group Sharing | 9/9/2022 | 17/6/2026 | Improper access control in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to access device information. | |
| Modificada | Media (4) | 0.24% | — | Samsung Group Sharing | 5/11/2021 | 17/6/2026 | Intent redirection vulnerability in Group Sharing prior to 10.8.03.2 allows attacker to access contact information. | |
| Modificada | Media (5.4) | 0.27% | — | Band -group Sharing & Planning | 9/9/2014 | 17/6/2026 | The BAND -Group sharing & planning (aka com.nhn.android.band) application 3.2.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. |