FL
Product
Flow
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 3Low 1
Watch
Add Flow to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-21444 | 8.8 | Feb 9 | Improper cryptographic implementation in Samsung Flow for PC 4.9.14.0 allows adjacent attackers to decrypt encrypted messages or inject commands Affected: before 4.9.14.0 |
| CVE-2023-21443 | 8.8 | Feb 9 | Improper cryptographic implementation in Samsung Flow for Android prior to version 4.9.04 allows adjacent attackers to decrypt encrypted messages or inject commands Affected: before 4.9.04 |
| CVE-2025-20972 | 5.5 | May 7 | Improper verification of intent by broadcast receiver in Samsung Flow prior to version 4.9.17.6 allows local attackers to modify Samsung Flow configuration Affected: before 4.9.17.6 |
| CVE-2025-20971 | 5.5 | May 7 | Improper input validation in Samsung Flow prior to version 4.9.17.6 allows local attackers to access data within Samsung Flow Affected: before 4.9.17.6 |
| CVE-2024-49407 | 4.6 | Nov 6 | Improper access control in Samsung Flow prior to version 4.9.15.7 allows physical attackers to access data across multiple user profiles Affected: before 4.9.15.7 |
| CVE-2024-34600 | 3.3 | Jul 2 | Improper verification of intent by broadcast receiver vulnerability in Samsung Flow prior to version 4.9.13.0 allows local attackers to copy image files to external storage Affected: before 4.9.13.0 |
Showing 6