First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2024-34636

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Use of implicit intent for sensitive communication in Samsung Email prior to version 6.1.94.2 allows local attackers to get sensitive information.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Aug 7, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-346375.5Improper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12, and SMR Jun-2024 Release 1 in Android 13 and CVE-2024-346387.1Improper handling of exceptional conditions in ThemeCenter prior to SMR Sep-2024 Release 1 allows local attackers to delete non-preloaded ap CVE-2024-346394.6Improper handling of exceptional conditions in Setupwizard prior to SMR Aug-2024 Release 1 allows physical attackers to bypass proper valida CVE-2024-34649.8A vulnerability was found in SourceCodester Laundry Management System 1.0 and classified as critical. This issue affects the function lapora CVE-2024-346403.3Improper access control vulnerability in BGProtectManager prior to SMR Sep-2024 Release 1 allows local attackers to bypass restriction of pr CVE-2024-346413.3Improper Export of Android Application Components in FeliCaTest prior to SMR Sep-2024 Release 1 allows local attackers to enable NFC configu CVE-2024-346424.6Improper authorization in One UI Home prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access sensitive information.CVE-2024-346435.5Improper access control in key input related function in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protecte CVE-2024-346445.5Improper access control in item selection related in Dressroom prior to SMR Sep-2024 Release 1 allows local attackers to access protected da CVE-2024-346454.6Improper input validation in ThemeCenter prior to SMR Sep-2024 Release 1 allows physical attackers to install privileged applications.CVE-2024-346465.5Improper access control in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to cause local permanent denial of ser CVE-2024-346475.5Incorrect use of privileged API in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to access privileged APIs rela