GS
Product
Galaxy Store
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 10Medium 18Low 1
Watch
Add Galaxy Store to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-21515 | 8.8 | May 26 | InstantPlay which included vulnerable script which could execute javascript in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK… Affected: before 4.5.49.8 |
| CVE-2023-21514 | 8.8 | May 26 | Improper scheme validation from InstantPlay Deeplink in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store Affected: before 4.5.49.8 |
| CVE-2026-20976 | 7.8 | Jan 9 | Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script Affected: before 4.6.02.0 |
| CVE-2023-21433 | 7.8 | Feb 9 | Improper access control vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to install applications from Galaxy Store Affected: before 4.5.49.8 |
| CVE-2022-33710 | 7.8 | Jul 12 | Improper input validation vulnerability in BillingPackageInsraller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege Affected: before 4.5.41.8 |
| CVE-2022-33709 | 7.8 | Jul 12 | Improper input validation vulnerability in ApexPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege Affected: before 4.5.41.8 |
| CVE-2022-33708 | 7.8 | Jul 12 | Improper input validation vulnerability in AppsPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities as Galaxy Store privilege Affected: before 4.5.41.8 |
| CVE-2022-28776 | 7.8 | Apr 11 | Improper access control vulnerability in Galaxy Store prior to version 4.5.36.4 allows attacker to install applications from Galaxy Store without user interactions Affected: before 4.5.36.4 |
| CVE-2023-42581 | 7.5 | Dec 5 | Improper URL validation from InstantPlay deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to access data Affected: before 4.5.64.4 |
| CVE-2022-22288 | 7.5 | Jan 10 | Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist Affected: before 4.5.36.5 |
Showing 10