Samsung Galaxy Store vulnerabilities, page 2
31 vulnerabilities
Known vulnerabilities in Samsung Galaxy Store, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-21000samsunggalaxy_store
EPSS score0.14%
Improper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege.CVE-2026-20976samsunggalaxy_storeEPSS score0.16%
Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script.CVE-2023-21515samsung mobilegalaxy store+1EPSS score0.52%
InstantPlay which included vulnerable script which could execute javascript in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.CVE-2023-21514samsung mobilegalaxy store+1EPSS score0.52%
Improper scheme validation from InstantPlay Deeplink in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.CVE-2023-21483samsunggalaxy_storeEPSS score0.10%
Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service.CVE-2023-21516samsung mobilegalaxy store+1EPSS score0.55%
XSS vulnerability from InstantPlay in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.CVE-2023-21434samsung mobilegalaxy store+1EPSS score12.88%
Improper input validation vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to execute JavaScript by launching a web page.CVE-2023-21433samsung mobilegalaxy store+1EPSS score3.67%
Improper access control vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to install applications from Galaxy Store.CVE-2023-42580samsunggalaxy_storeEPSS score0.97%
Improper URL validation from MCSLaunch deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to install APK from Galaxy Store.CVE-2023-42581samsunggalaxy_storeEPSS score1.17%
Improper URL validation from InstantPlay deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to access data.CVE-2023-30705samsunggalaxy_storeEPSS score0.15%
Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.56.6?allows local attackers to access privileged content providers as Galaxy Store permission.