CVE-2023-21514

HIGH · CVSS 7.5 EPSS 0.52%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-05-26 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2023-21514

Severity

HIGH

CVSS

7.5

EPSS

0.52%

Java

Original NVD Description

Improper scheme validation from InstantPlay Deeplink in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.