Galaxy Store vulnerabilities
7 known vulnerabilities in Galaxy Store from Samsung. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.6 Critical severity
Galaxy Store: Improper Neutralization of Input During Web Page Generation
XSS vulnerability from InstantPlay in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.
- 8.8 High severity
InstantPlay which included vulnerable script which could execute javascript in Galaxy Store…
InstantPlay which included vulnerable script which could execute javascript in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.
- 8.8 High severity
Improper scheme validation from InstantPlay Deeplink in Galaxy Store prior to version 4.5.49.8…
Improper scheme validation from InstantPlay Deeplink in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.
- 7.8 High severity
Galaxy Store: Improper Privilege Management
Improper input validation vulnerability in BillingPackageInsraller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege.
- 7.8 High severity
Galaxy Store: Improper Privilege Management
Improper input validation vulnerability in ApexPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege.
- 7.8 High severity
Galaxy Store: Improper Privilege Management
Improper input validation vulnerability in AppsPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege.
- 7.8 High severity
Galaxy Store: Improper Authorization
Improper access control vulnerability in Galaxy Store prior to version 4.5.36.4 allows attacker to install applications from Galaxy Store without user interactions.