How severe is CVE-2018-10502?

This vulnerability has a severity rating of HIGH with a CVSS score of 7.8 out of 10.

What type of vulnerability is CVE-2018-10502?

This is classified as CWE-269, which is a common weakness in software security.

CVE-2018-10502 - HIGH Severity | CVSS 7.8

Vulnerability Description

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Galaxy Apps Fixed in version 4.2.18.2. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of a staging mode. The issue lies in the ability to change the configuration based on the presence of a file in an user-controlled location. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the application. Was ZDI-CAN-5359.

Related Vulnerabilities

CVE-2002-0367

HIGH

CVSS:7.8(High)

smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges ...

CWE-2692002

CVE-2008-2931

HIGH

CVSS:7.8(High)

The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAP_SYS_ADMIN capability, which allows local users to gain privileges or cause a...

CWE-2692008

CVE-2011-3349

HIGH

CVSS:7.8(High)

lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders. A local user can overwrite root-owned files via a symlink, which can al...

CWE-2692011

CVE-2011-4954

HIGH

CVSS:7.8(High)

cobbler has local privilege escalation via the use of insecure location for PYTHON_EGG_CACHE

CWE-2692011

CVE-2012-1615

HIGH

CVSS:7.8(High)

A Privilege Escalation vulnerability exits in Fedoraproject Sectool due to an incorrect DBus file.

CWE-2692012

CVE-2012-2312

HIGH

CVSS:7.8(High)

An Elevated Privileges issue exists in JBoss AS 7 Community Release due to the improper implementation in the security context propagation, A threat gets reused from the thread pool that still retains...

CWE-2692012