Galaxy Watch Plugin

galaxy_watch_plugin

Vendor: Samsung • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-36875 1Samsung 1Galaxy Watch Plugin Jun 17, 2026 Sep 9, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Improper restriction of broadcasting Intent in SaWebViewRelayActivity of?Waterplugin prior to version 2.2.11.22081151 allows attacker to access the file without permission.
CVE-2022-36874 1Samsung 1Galaxy Watch Plugin Jun 17, 2026 Sep 9, 2022 N/A· v4 6.2 MEDIUM· v3 N/A· v2 Improper Handling of Insufficient Permissions or Privileges vulnerability in Waterplugin prior to 2.2.11.22040751 allows attacker to access device IMEI and Serial number.
CVE-2022-36873 1Samsung 1Galaxy Watch Plugin Jun 17, 2026 Sep 9, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Improper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior to version 2.2.11.22081151 leaks MAC address of the connected Bluetooth device.
CVE-2022-25827 1Samsung 1Galaxy Watch Plugin Jun 17, 2026 Mar 10, 2022 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.22012751 allows attacker to access password information of connected WiFiAp in the log
CVE-2022-25823 1Samsung 1Galaxy Watch Plugin Jun 17, 2026 Mar 10, 2022 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.220126741 allows attackers to access user information in log.
CVE-2021-25420 1Samsung 1Galaxy Watch Plugin Jun 17, 2026 Jun 11, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log.