CVE-2023-21463

3.3 lowEPSS 0.1%

Low (3.3) in samsung myfiles. EPSS 0.1% chance of exploitation in the next 30 days.

Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in Android 12 and 14.1.03.0 in Android 13 allows local attacker to get sensitive information of secret mode in Samsung Internet application with specific conditions.

Severity

CVSS 3.1

3.3 low

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2023-03-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

samsung:myfiles

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03
https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03

Check your stack JSON