Abdulla Aldoseri

The issue is related to errors in processing permissions in the Permissions component of Google Chrome and Microsoft Edge browsers. This could allow an attacker to impact the integrity, availability, and confidentiality of protected information. Specifically, in Google Chrome, a remote attacker could tamper with the contents of the Omnibox (URL bar) via a crafted HTML page.

Name of the Vulnerable Software and Affected Versions: SDP SDK versions prior to SMR JUN-2021 Release 1 Description: The issue is related to improper authorization, which allows access to internal storage. Recommendations: For versions prior to SMR JUN-2021 Release 1, update to SMR JUN-2021 Release 1 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Samsung Internet versions prior to 14.0.1.62 Description: The issue is related to non-compliance with recommended secure coding schemes, allowing attackers to display a fake URL in the address bar via a phishing URL link. Recommendations: For versions prior to 14.0.1.62, update to version 14.0.1.62 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Secure Folder versions prior to SMR Oct-2020 Release 1 Description: The issue is related to an improper authorization of using a debugging command in Secure Folder, which allows unauthorized access to contents in Secure Folder via the debugging command. Recommendations: For versions prior to SMR Oct-2020 Release 1, update to SMR Oct-2020 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the debugging command to minimize the risk of exploitation.

The issue is related to a privilege escalation vulnerability due to design defects. An attacker needs physical contact with the mobile phone to obtain higher privileges and execute relevant commands, resulting in the user's privilege promotion.