CVE-2022-36875: Improper restriction of broadcasting Intent in SaWebViewRelayActivity of?Waterplugin prior to version 2.2.11.22081151 allows attacker to access the file…

PriorityP424medium5.5CVSS 3.1

AVLACLPRLUINSUCHINAN

EPSS

0.19%

8.9th percentile

Improper restriction of broadcasting Intent in SaWebViewRelayActivity of?Waterplugin prior to version 2.2.11.22081151 allows attacker to access the file without permission.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
samsung	galaxy_watch_plugin	< 2.2.11.22081151	2.2.11.22081151
samsung_mobile	com.samsung.android.waterplugin	>= unspecified < 2.2.11.22081151	2.2.11.22081151

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.