CVE-2022-36836

5.5 mediumEPSS 0.2%

Medium (5.5) in samsung charm firmware. EPSS 0.2% chance of exploitation in the next 30 days.

Unprotected provider vulnerability in Charm by Samsung prior to version 1.2.3 allows attackers to read connection state without permission.

Severity

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2022-08-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19