CVE-2022-39915

published 2022-12-08

CVE-2022-39915: Improper access control vulnerability in Calendar prior to versions 11.6.08.0 in Android Q(10), 12.2.11.3000 in Android R(11), 12.3.07.2000 in Android S(12)…

Priority P4 24 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C H I N A N

Improper access control vulnerability in Calendar prior to versions 11.6.08.0 in Android Q(10), 12.2.11.3000 in Android R(11), 12.3.07.2000 in Android S(12), and 12.4.02.0 in Android T(13) allows attackers to access sensitive information via implicit intent.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
samsung	calendar	< 11.6.08.0	11.6.08.0
samsung	calendar	< 12.2.11.3000	12.2.11.3000
samsung	calendar	< 12.3.07.2000	12.3.07.2000
samsung	calendar	< 12.4.02.0	12.4.02.0
samsung_mobile	samsung_calendar	>= unspecified < 11.6.08.0 in Android Q(10), 12.2.11.3000 in Android R(11), 12.3.07.2000 in Android S(12), and 12.4.02.0 in Android T(13)	11.6.08.0 in Android Q(10), 12.2.11.3000 in Android R(11), 12.3.07.2000 in Android S(12), and 12.4.02.0 in Android T(13)

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-284