GS
Product
Galaxy Store
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 12Low 0
Watch
Add Galaxy Store to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-21002 | 5.5 | Mar 16 | Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to install arbitrary application Affected: All versions, or not specified |
| CVE-2026-21001 | 5.5 | Mar 16 | Path traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege Affected: All versions, or not specified |
| CVE-2026-21000 | 5.5 | Mar 16 | Improper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege Affected: All versions, or not specified |
| CVE-2023-21483 | 5.5 | Sep 3 | Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service Affected: All versions, or not specified |
| CVE-2025-20951 | 5.5 | Apr 8 | Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.90.7 allows local attackers to write arbitrary files with the privilege of… Affected: All versions, or not specified |
| CVE-2024-20870 | 5.5 | May 7 | Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.71.8 allows local attackers to write arbitrary files with the privilege of… Affected: All versions, or not specified |
| CVE-2024-20825 | 5.5 | Feb 6 | Implicit intent hijacking vulnerability in IAP of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent Affected: All versions, or not specified |
| CVE-2024-20824 | 5.5 | Feb 6 | Implicit intent hijacking vulnerability in VoiceSearch of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent Affected: All versions, or not specified |
| CVE-2024-20823 | 5.5 | Feb 6 | Implicit intent hijacking vulnerability in SamsungAccount of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent Affected: All versions, or not specified |
| CVE-2024-20822 | 5.5 | Feb 6 | Implicit intent hijacking vulnerability in AccountActivity of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent Affected: All versions, or not specified |
| CVE-2023-30705 | 5.5 | Aug 10 | Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.56.6?allows local attackers to access privileged content providers as Galaxy Store permission Affected: All versions, or not specified |
| CVE-2025-20895 | 4.6 | Feb 4 | Authentication Bypass Using an Alternate Path in Galaxy Store prior to version 4.5.87.6 allows physical attackers to install arbitrary applications to bypass restrictions of… Affected: All versions, or not specified |
Showing 12
