Dimitrios Valsamaras

**Name of the Vulnerable Software and Affected Versions** Samsung Account versions prior to 15.5.01.1 **Description** A URL redirection issue exists in Samsung Account. This allows remote attackers to potentially obtain an access token. The issue involves a redirection that could expose sensitive information. **Recommendations** Update Samsung Account to version 15.5.01.1 or later.

**Name of the Vulnerable Software and Affected Versions** Samsung Members versions prior to 5.6.00.11 **Description** Improper input validation in Samsung Members allows remote attackers to connect an arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required to trigger this issue. **Recommendations** Update Samsung Members to version 5.6.00.11 or later.

**Name of the Vulnerable Software and Affected Versions** Samsung Galaxy Store versions prior to 4.6.02 **Description** A flaw exists in the Galaxy Store application where insufficient input validation can allow a local attacker to execute arbitrary script. The issue affects the Galaxy Store application and could potentially lead to unauthorized code execution on a compromised device. **Recommendations** Update the Galaxy Store application to version 4.6.02 or later.

**Name of the Vulnerable Software and Affected Versions** RHOPHI Analytics LLP Office App-Edit Word version 6.4.1 **Description** A security flaw exists in the file import process that could allow attackers to perform a directory traversal. This issue affects the application's handling of imported files, potentially enabling unauthorized access to system files. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Defender for Endpoint on Android (affected versions not specified) Description: The issue is related to insufficient input validation, which can allow a remote attacker to conduct spoofing attacks. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WPS Office versions prior to 17.0.0 **Description** The issue arises from the application's failure to properly sanitize file names before processing them through external application interactions, leading to a form of path traversal. This potentially enables any application to dispatch a crafted library file, aiming to overwrite an existing native library utilized by WPS Office. Successful exploitation could result in the execution of arbitrary commands under the guise of WPS Office's application ID. **Recommendations** For versions prior to 17.0.0, update to version 17.0.0 or later to resolve the issue. As a temporary workaround, consider restricting interactions with external applications to minimize the risk of exploitation. Avoid using potentially crafted library files until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Microsoft Teams for Android (affected versions not specified) **Description** The issue is related to an information disclosure vulnerability. Exploitation of this vulnerability may allow an attacker to gain unauthorized access to protected information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Outlook for Android (affected versions not specified) **Description** The issue is related to insufficient protection of service data in the Microsoft Outlook for Android client. Exploitation of this issue may allow a remote attacker to gain unauthorized access to protected information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Teams for Android (affected versions not specified) **Description** The issue is related to insufficient protection of service data in Microsoft Teams for Android, which can allow an attacker to gain unauthorized access to protected information by downloading and running a specially crafted application. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Office for Android (affected versions not specified) **Description** The issue is related to errors in the representation of information by the user interface. Exploitation of this issue may allow an attacker to conduct spoofing attacks. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft OneNote (affected versions not specified) **Description** The issue is related to errors in the representation of information by the user interface of Microsoft OneNote. Exploitation of this issue may allow a remote attacker to elevate their privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.