CWE-927 · Access Control
Use of Implicit Intent for Sensitive Communication
57CVEs
SortMost likely exploited
57 CVEs with CWE-927 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-4903CodenameOne implicit intent for sensitive communicationCodenameone · CodenameOne · CVSS 5 · 2023-02-10 | 5.0 | 0.7% | 2023-02-10 |
| CVE-2023-42545Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13 all…Samsung Mobile · Phone · CVSS 5.5 · 2023-11-07 | 5.5 | 0.5% | 2023-11-07 |
| CVE-2023-42551Use of implicit intent for sensitive communication vulnerability in startTncActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with S…Samsung Mobile · Samsung Account · CVSS 5.5 · 2023-11-07 | 5.5 | 0.4% | 2023-11-07 |
| CVE-2023-42550Use of implicit intent for sensitive communication vulnerability in startSignIn in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsun…Samsung Mobile · Samsung Account · CVSS 5.5 · 2023-11-07 | 5.5 | 0.4% | 2023-11-07 |
| CVE-2023-42549Use of implicit intent for sensitive communication vulnerability in startNameValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary…Samsung Mobile · Samsung Account · CVSS 5.5 · 2023-11-07 | 5.5 | 0.4% | 2023-11-07 |
| CVE-2023-42548Use of implicit intent for sensitive communication vulnerability in startMandatoryCheckActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary…Samsung Mobile · Samsung Account · CVSS 5.5 · 2023-11-07 | 5.5 | 0.4% | 2023-11-07 |
| CVE-2023-42547Use of implicit intent for sensitive communication vulnerability in startEmailValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary…Samsung Mobile · Samsung Account · CVSS 5.5 · 2023-11-07 | 5.5 | 0.4% | 2023-11-07 |
| CVE-2023-42546Use of implicit intent for sensitive communication vulnerability in startAgreeToDisclaimerActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitra…Samsung Mobile · Samsung Account · CVSS 5.5 · 2023-11-07 | 5.5 | 0.4% | 2023-11-07 |
| CVE-2023-47889The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broadcast receivers. These exposed actions can allow any app on…Binhdrm26 · Super Reboot · CVSS 7.8 · 2024-02-06 | 7.8 | 0.3% | 2024-02-06 |
| CVE-2023-42572Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information.Samsung Mobile · Samsung Account Web SDK · CVSS 3.3 · 2023-12-05 | 3.3 | 0.3% | 2023-12-05 |
| CVE-2023-42555Use of implicit intent for sensitive communication vulnerability in EasySetup prior to version 11.1.13 allows attackers to get the bluetooth address of user device.Samsung Mobile · EasySetup · CVSS 6.3 · 2023-11-07 | 6.3 | 0.3% | 2023-11-07 |
| CVE-2023-42556Improper usage of implicit intent in Contacts prior to SMR Dec-2023 Release 1 allows attacker to get sensitive information.Samsung Mobile · Samsung Mobile Devices · CVSS 3.3 · 2023-12-05 | 3.3 | 0.2% | 2023-12-05 |
| CVE-2023-42552Implicit intent hijacking vulnerability in Firewall application prior to versions 12.1.00.24 in Android 11, 13.1.00.16 in Android 12 and 14.1.00.7 in Android 13 allows 3rd party a…Samsung Mobile · Firewall · CVSS 4.4 · 2023-11-07 | 4.4 | 0.2% | 2023-11-07 |
| CVE-2024-20807Implicit intent hijacking vulnerability in Samsung Email prior to version 6.1.90.16 allows local attacker to get sensitive information.Samsung Mobile · Samsung Email · CVSS 3.3 · 2024-01-04 | 3.3 | 0.2% | 2024-01-04 |
| CVE-2022-33734Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection information without permission.Samsung Mobile · Charm by Samsung · CVSS 6.2 · 2022-08-05 | 6.2 | 0.2% | 2022-08-05 |
| CVE-2022-33733Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection information without permission.Samsung Mobile · Charm by Samsung · CVSS 6.2 · 2022-08-05 | 6.2 | 0.2% | 2022-08-05 |
| CVE-2022-36830PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via implicit inten…Samsung Mobile · Charm by Samsung · CVSS 6.2 · 2022-08-05 | 6.2 | 0.2% | 2022-08-05 |
| CVE-2022-36829PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via implicit intent.Samsung Mobile · Charm by Samsung · CVSS 6.2 · 2022-08-05 | 6.2 | 0.2% | 2022-08-05 |
| CVE-2025-20954Use of implicit intent for sensitive communication in EnrichedCall prior to SMR May-2025 Release 1 allows local attackers to access sensitive information. User interaction is requ…Samsung Mobile · Samsung Mobile Devices · CVSS 5.5 · 2025-05-07 | 5.5 | 0.2% | 2025-05-07 |
| CVE-2024-20825Implicit intent hijacking vulnerability in IAP of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent.Samsung Mobile · Galaxy Store · CVSS 5.5 · 2024-02-06 | 5.5 | 0.2% | 2024-02-06 |
| CVE-2024-20824Implicit intent hijacking vulnerability in VoiceSearch of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent.Samsung Mobile · Galaxy Store · CVSS 5.5 · 2024-02-06 | 5.5 | 0.2% | 2024-02-06 |
| CVE-2024-20823Implicit intent hijacking vulnerability in SamsungAccount of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent.Samsung Mobile · Galaxy Store · CVSS 5.5 · 2024-02-06 | 5.5 | 0.2% | 2024-02-06 |
| CVE-2024-20822Implicit intent hijacking vulnerability in AccountActivity of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent.Samsung Mobile · Galaxy Store · CVSS 5.5 · 2024-02-06 | 5.5 | 0.2% | 2024-02-06 |
| CVE-2023-41828An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported content provider.Motorola · Phones · CVSS 4.4 · 2024-05-03 | 4.4 | 0.2% | 2024-05-03 |
| CVE-2024-34671Use of implicit intent for sensitive communication in translation혻in Samsung Internet prior to version 26.0.3.1 allows local attackers to get sensitive information. User interacti…Samsung Mobile · Samsung Internet · CVSS 3.3 · 2024-10-08 | 3.3 | 0.2% | 2024-10-08 |
| CVE-2024-20810Implicit intent hijacking vulnerability in Smart Suggestions prior to SMR Feb-2024 Release 1 allows local attackers to get sensitive information.Samsung Mobile · Samsung Mobile Devices · CVSS 3.3 · 2024-02-06 | 3.3 | 0.2% | 2024-02-06 |
| CVE-2025-20977Use of implicit intent for sensitive communication in translation in Samsung Notes prior to version 4.4.29.23 allows local attackers to get sensitive information. User interaction…Samsung Mobile · Samsung Notes · CVSS 3.3 · 2025-05-07 | 3.3 | 0.2% | 2025-05-07 |
| CVE-2023-41826A PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to access files or interact with non-exported software compone…Motorola · Phones · CVSS 5.1 · 2024-05-03 | 5.1 | 0.2% | 2024-05-03 |
| CVE-2024-34602Use of implicit intent for sensitive communication in Samsung Messages prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information. User interaction is req…Samsung Mobile · Samsung Mobile Devices · CVSS 3.3 · 2024-07-08 | 3.3 | 0.2% | 2024-07-08 |
| CVE-2024-3108An implicit intent vulnerability was reported for Motorola’s Time Weather Widget application that could allow a local application to acquire the location of the device without aut…Motorola · Phones · CVSS 5.5 · 2024-05-03 | 5.5 | 0.2% | 2024-05-03 |
| CVE-2023-41820An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information about connected Bluetooth audio devices.Motorola · Phones · CVSS 5 · 2024-05-03 | 5.0 | 0.1% | 2024-05-03 |
| CVE-2025-20950Use of implicit intent for sensitive communication in SamsungNotes prior to version 4.4.26.45 allows local attackers to access sensitive information.Samsung Mobile · SamsungNotes · CVSS 4 · 2025-04-08 | 4.0 | 0.1% | 2025-04-08 |
| CVE-2024-3480An Implicit intent vulnerability was reported in the Motorola framework that could allow an attacker to read telephony-related data.Motorola · Phones · CVSS 2.8 · 2024-05-03 | 2.8 | 0.1% | 2024-05-03 |
| CVE-2024-20850Use of Implicit Intent for Sensitive Communication in Samsung Pay prior to version 5.4.99 allows local attackers to access information of Samsung Pay.Samsung Mobile · Samsung Pay · CVSS 6.2 · 2024-04-02 | 6.2 | 0.1% | 2024-04-02 |
| CVE-2024-49417Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User interaction is required for tr…Samsung Mobile · Smart Touch Call · CVSS 2 · 2024-12-03 | 2.0 | 0.1% | 2024-12-03 |
| CVE-2024-20896Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.Samsung Mobile · Samsung Mobile Devices · CVSS 5.5 · 2024-07-02 | 5.5 | 0.1% | 2024-07-02 |
| CVE-2024-20826Implicit intent hijacking vulnerability in UPHelper library prior to version 4.0.0 allows local attackers to access sensitive information via implicit intent.Samsung Mobile · UPHelper · CVSS 5.5 · 2024-02-06 | 5.5 | 0.1% | 2024-02-06 |
| CVE-2023-31014NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implicit intent meant for…NVIDIA · GeForce NOW for Android mobile and TV app · CVSS 4.2 · 2023-09-20 | 4.2 | 0.1% | 2023-09-20 |
| CVE-2025-20909Use of implicit intent for sensitive communication in Settings prior to SMR Mar-2025 Release 1 allows local attackers to access sensitive information.Samsung Mobile · Samsung Mobile Devices · CVSS 4 · 2025-03-06 | 4.0 | 0.1% | 2025-03-06 |
| CVE-2023-41824An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling phone number and calling data.Motorola · Phones · CVSS 2.8 · 2024-05-03 | 2.8 | 0.1% | 2024-05-03 |
| CVE-2023-41817An improper export vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read unauthorized information.Motorola · Phones · CVSS 2.8 · 2024-05-03 | 2.8 | 0.1% | 2024-05-03 |
| CVE-2024-34670Use of implicit intent for sensitive communication in Sound Assistant prior to version 6.1.0.9 allows local attackers to get sensitive information.Samsung Mobile · Sound Assistant · CVSS 4 · 2024-10-08 | 4.0 | 0.1% | 2024-10-08 |
| CVE-2024-20834The sensitive information exposure vulnerability in WlanTest prior to SMR Mar-2024 Release 1 allows local attackers to access MAC address without proper permission.Samsung Mobile · Samsung Mobile Devices · CVSS 3.3 · 2024-03-05 | 3.3 | 0.1% | 2024-03-05 |
| CVE-2024-20897Use of implicit intent for sensitive communication in FCM function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.Samsung Mobile · Samsung Mobile Devices · CVSS 4 · 2024-07-02 | 4.0 | 0.1% | 2024-07-02 |
| CVE-2025-20896Use of implicit intent for sensitive communication in EasySetup prior to version 11.1.18 allows local attackers to access sensitive information.Samsung Mobile · EasySetup · CVSS 4 · 2025-02-04 | 4.0 | 0.1% | 2025-02-04 |
| CVE-2024-49416Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to get sensitive information.Samsung Mobile · SmartThings · CVSS 4 · 2024-12-03 | 4.0 | 0.1% | 2024-12-03 |
| CVE-2024-34680Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to get sensitive information.Samsung Mobile · Samsung Mobile Devices · CVSS 4 · 2024-11-06 | 4.0 | 0.1% | 2024-11-06 |
| CVE-2024-34636Use of implicit intent for sensitive communication in Samsung Email prior to version 6.1.94.2 allows local attackers to get sensitive information.Samsung Mobile · Samsung Email · CVSS 4 · 2024-08-07 | 4.0 | 0.1% | 2024-08-07 |
| CVE-2024-20899Use of implicit intent for sensitive communication in RCS function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.Samsung Mobile · Samsung Mobile Devices · CVSS 4 · 2024-07-02 | 4.0 | 0.1% | 2024-07-02 |
| CVE-2024-20898Use of implicit intent for sensitive communication in SoftphoneClient in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.Samsung Mobile · Samsung Mobile Devices · CVSS 4 · 2024-07-02 | 4.0 | 0.1% | 2024-07-02 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.