CVE-2023-21464

published 2023-03-16

CVE-2023-21464: Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12 allows local attacker to configure…

Priority P4 10 low 3.3 CVSS 3.1

AV L AC L PR L UI N S U C N I L A N

Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12 allows local attacker to configure improper status.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
samsung	calendar	< 12.4.02.9000	12.4.02.9000
samsung	calendar	< 12.3.08.2000	12.3.08.2000
samsung_mobile	samsung_calendar	>= unspecified < 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12	12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-281