CWE-927 · 52 records
Use of Implicit Intent for Sensitive Communication
CVEs in this class
52 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
32Monitor | CVE-2022-4903No exploit | CodenameOne implicit intent for sensitive communicationcodenameone · codename one · CWE-927 | High8.1 | — | 0.6% | Feb 10, 2023 |
31Monitor | CVE-2023-47889Proof of concept | The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broadcast receivers.binhdrm26 · super reboot · CWE-927 | High7.8 | — | 0.2% | Feb 5, 2024 |
31Monitor | CVE-2023-44122No exploit | LockScreenSettings - Theft arbitrary files with system privilegelg · v60 thin q 5g · CWE-927 | High7.8 | — | 0.1% | Sep 27, 2023 |
31Monitor | CVE-2025-48558No exploit | In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit integoogle · android · CWE-927 | High7.8 | — | 0.0% | Sep 4, 2025 |
30Monitor | CVE-2023-42545No exploit | Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Ansamsung · phone · CWE-927 | High7.5 | — | 0.4% | Nov 7, 2023 |
26Monitor | CVE-2023-42550No exploit | Use of implicit intent for sensitive communication vulnerability in startSignIn in Samsung Account prior to version 14.5.00.7 allows attackesamsung · account · CWE-927 | Medium6.5 | — | 0.3% | Nov 7, 2023 |
26Monitor | CVE-2023-42548No exploit | Use of implicit intent for sensitive communication vulnerability in startMandatoryCheckActivity in Samsung Account prior to version 14.5.00.samsung · account · CWE-927 | Medium6.5 | — | 0.3% | Nov 7, 2023 |
22Monitor | CVE-2023-42572No exploit | Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information.samsung · account web software development kit · CWE-927 | Medium5.5 | — | 0.2% | Dec 4, 2023 |
22Monitor | CVE-2023-42556No exploit | Improper usage of implicit intent in Contacts prior to SMR Dec-2023 Release 1 allows attacker to get sensitive information.samsung · android · CWE-927 | Medium5.5 | — | 0.2% | Dec 4, 2023 |
22Monitor | CVE-2023-42555No exploit | Use of implicit intent for sensitive communication vulnerability in EasySetup prior to version 11.1.13 allows attackers to get the bluetoothsamsung · easysetup · CWE-927 | Medium5.5 | — | 0.2% | Nov 7, 2023 |
22Monitor | CVE-2022-33734No exploit | Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connecsamsung · charm · CWE-927 | Medium5.5 | — | 0.1% | Aug 5, 2022 |
22Monitor | CVE-2022-36830No exploit | PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local attackers to access filesamsung · charm firmware · CWE-927 | Medium5.5 | — | 0.1% | Aug 5, 2022 |
22Monitor | CVE-2022-36829No exploit | PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local attackers to access files withsamsung · charm firmware · CWE-927 | Medium5.5 | — | 0.1% | Aug 5, 2022 |
22Monitor | CVE-2025-20954No exploit | Use of implicit intent for sensitive communication in EnrichedCall prior to SMR May-2025 Release 1 allows local attackers to access sensitivsamsung · android · CWE-927 | Medium5.5 | — | 0.1% | May 7, 2025 |
22Monitor | CVE-2024-20823No exploit | Implicit intent hijacking vulnerability in SamsungAccount of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitisamsung · galaxy store · CWE-927 | Medium5.5 | — | 0.1% | Feb 5, 2024 |
22Monitor | CVE-2024-20824No exploit | Implicit intent hijacking vulnerability in VoiceSearch of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive samsung · galaxy store · CWE-927 | Medium5.5 | — | 0.1% | Feb 5, 2024 |
22Monitor | CVE-2024-20822No exploit | Implicit intent hijacking vulnerability in AccountActivity of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitsamsung · galaxy store · CWE-927 | Medium5.5 | — | 0.1% | Feb 5, 2024 |
22Monitor | CVE-2024-20825No exploit | Implicit intent hijacking vulnerability in IAP of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive informatsamsung · galaxy store · CWE-927 | Medium5.5 | — | 0.1% | Feb 5, 2024 |
22Monitor | CVE-2024-34671No exploit | Use of implicit intent for sensitive communication in translation혻in Samsung Internet prior to version 26.0.3.1 allows local attackers to gesamsung · internet · CWE-927 | Medium5.5 | — | 0.1% | Oct 8, 2024 |
22Monitor | CVE-2024-34602No exploit | Use of implicit intent for sensitive communication in Samsung Messages prior to SMR Jul-2024 Release 1 allows local attackers to get sensitisamsung · android · CWE-927 | Medium5.5 | — | 0.1% | Jul 8, 2024 |
22Monitor | CVE-2024-3108No exploit | An implicit intent vulnerability was reported for Motorola’s Time Weather Widget application that could allow a local application to acquirmotorola · phones · CWE-927 | Medium5.5 | — | 0.1% | May 3, 2024 |
22Monitor | CVE-2024-20850No exploit | Use of Implicit Intent for Sensitive Communication in Samsung Pay prior to version 5.4.99 allows local attackers to access information of Sasamsung · samsung pay · CWE-927 | Medium5.5 | — | 0.1% | Apr 1, 2024 |
22Monitor | CVE-2024-20896No exploit | Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows local attackers to get sesamsung · android · CWE-927 | Medium5.5 | — | 0.1% | Jul 2, 2024 |
22Monitor | CVE-2024-20826No exploit | Implicit intent hijacking vulnerability in UPHelper library prior to version 4.0.0 allows local attackers to access sensitive information visamsung · uphelper library · CWE-927 | Medium5.5 | — | 0.1% | Feb 5, 2024 |
22Monitor | CVE-2025-20950No exploit | Use of implicit intent for sensitive communication in SamsungNotes prior to version 4.4.26.45 allows local attackers to access sensitive infsamsung · notes · CWE-927 | Medium5.5 | — | 0.1% | Apr 8, 2025 |
- CVE-2022-490332Monitor
CodenameOne implicit intent for sensitive communication
HighCVSS 8.1No exploitEPSS 0%codenameone · codename oneFeb 10, 2023
- CVE-2023-4788931Monitor
The Android application BINHDRM26 com.bdrm.superreboot 1.0.3, exposes several critical actions through its exported broadcast receivers.
HighCVSS 7.8Proof of conceptEPSS 0%binhdrm26 · super rebootFeb 5, 2024
- CVE-2023-4412231Monitor
LockScreenSettings - Theft arbitrary files with system privilege
HighCVSS 7.8No exploitEPSS 0%lg · v60 thin q 5gSep 27, 2023
- CVE-2025-4855831Monitor
In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit inte
HighCVSS 7.8No exploitEPSS 0%google · androidSep 4, 2025
- CVE-2023-4254530Monitor
Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in An
HighCVSS 7.5No exploitEPSS 0%samsung · phoneNov 7, 2023
- CVE-2023-4255026Monitor
Use of implicit intent for sensitive communication vulnerability in startSignIn in Samsung Account prior to version 14.5.00.7 allows attacke
MediumCVSS 6.5No exploitEPSS 0%samsung · accountNov 7, 2023
- CVE-2023-4254826Monitor
Use of implicit intent for sensitive communication vulnerability in startMandatoryCheckActivity in Samsung Account prior to version 14.5.00.
MediumCVSS 6.5No exploitEPSS 0%samsung · accountNov 7, 2023
- CVE-2023-4257222Monitor
Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information.
MediumCVSS 5.5No exploitEPSS 0%samsung · account web software development kitDec 4, 2023
- CVE-2023-4255622Monitor
Improper usage of implicit intent in Contacts prior to SMR Dec-2023 Release 1 allows attacker to get sensitive information.
MediumCVSS 5.5No exploitEPSS 0%samsung · androidDec 4, 2023
- CVE-2023-4255522Monitor
Use of implicit intent for sensitive communication vulnerability in EasySetup prior to version 11.1.13 allows attackers to get the bluetooth
MediumCVSS 5.5No exploitEPSS 0%samsung · easysetupNov 7, 2023
- CVE-2022-3373422Monitor
Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connec
MediumCVSS 5.5No exploitEPSS 0%samsung · charmAug 5, 2022
- CVE-2022-3683022Monitor
PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local attackers to access file
MediumCVSS 5.5No exploitEPSS 0%samsung · charm firmwareAug 5, 2022
- CVE-2022-3682922Monitor
PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local attackers to access files with
MediumCVSS 5.5No exploitEPSS 0%samsung · charm firmwareAug 5, 2022
- CVE-2025-2095422Monitor
Use of implicit intent for sensitive communication in EnrichedCall prior to SMR May-2025 Release 1 allows local attackers to access sensitiv
MediumCVSS 5.5No exploitEPSS 0%samsung · androidMay 7, 2025
- CVE-2024-2082322Monitor
Implicit intent hijacking vulnerability in SamsungAccount of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensiti
MediumCVSS 5.5No exploitEPSS 0%samsung · galaxy storeFeb 5, 2024
- CVE-2024-2082422Monitor
Implicit intent hijacking vulnerability in VoiceSearch of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive
MediumCVSS 5.5No exploitEPSS 0%samsung · galaxy storeFeb 5, 2024
- CVE-2024-2082222Monitor
Implicit intent hijacking vulnerability in AccountActivity of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensit
MediumCVSS 5.5No exploitEPSS 0%samsung · galaxy storeFeb 5, 2024
- CVE-2024-2082522Monitor
Implicit intent hijacking vulnerability in IAP of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive informat
MediumCVSS 5.5No exploitEPSS 0%samsung · galaxy storeFeb 5, 2024
- CVE-2024-3467122Monitor
Use of implicit intent for sensitive communication in translation혻in Samsung Internet prior to version 26.0.3.1 allows local attackers to ge
MediumCVSS 5.5No exploitEPSS 0%samsung · internetOct 8, 2024
- CVE-2024-3460222Monitor
Use of implicit intent for sensitive communication in Samsung Messages prior to SMR Jul-2024 Release 1 allows local attackers to get sensiti
MediumCVSS 5.5No exploitEPSS 0%samsung · androidJul 8, 2024
- CVE-2024-310822Monitor
An implicit intent vulnerability was reported for Motorola’s Time Weather Widget application that could allow a local application to acquir
MediumCVSS 5.5No exploitEPSS 0%motorola · phonesMay 3, 2024
- CVE-2024-2085022Monitor
Use of Implicit Intent for Sensitive Communication in Samsung Pay prior to version 5.4.99 allows local attackers to access information of Sa
MediumCVSS 5.5No exploitEPSS 0%samsung · samsung payApr 1, 2024
- CVE-2024-2089622Monitor
Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows local attackers to get se
MediumCVSS 5.5No exploitEPSS 0%samsung · androidJul 2, 2024
- CVE-2024-2082622Monitor
Implicit intent hijacking vulnerability in UPHelper library prior to version 4.0.0 allows local attackers to access sensitive information vi
MediumCVSS 5.5No exploitEPSS 0%samsung · uphelper libraryFeb 5, 2024
- CVE-2025-2095022Monitor
Use of implicit intent for sensitive communication in SamsungNotes prior to version 4.4.26.45 allows local attackers to access sensitive inf
MediumCVSS 5.5No exploitEPSS 0%samsung · notesApr 8, 2025