AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-42580

HIGH · CVSS 7.5 EPSS 0.97%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-12-05 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. It affects Java.

CVE
CVE-2023-42580
Severity
HIGH
CVSS
7.5
EPSS
0.97%
Java

Original NVD Description

Improper URL validation from MCSLaunch deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to install APK from Galaxy Store.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-28573 MEDIUM CVE-2026-21038 MEDIUM CVE-2026-21037 HIGH CVE-2026-21036 MEDIUM CVE-2026-21035 HIGH CVE-2026-21034 LOW