CVE-2023-21463

CVE-2023-21463 is an improper access control vulnerability in Samsung's MyFiles application affecting Android 11, 12, and 13. A local attacker can exploit this flaw to gain limited access to sensitive information within the Samsung Internet application's secret mode under specific conditions. With a CVSS score of 3.3 (LOW), the attack requires local access and low privileges, with no user interaction needed, resulting in a low impact on confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, indicating a low current threat level.