PatchTheCVEpass vulnerabilities and fixes
Recent CVEs affecting pass, with upgrade or downgrade steps. 1 tracked.
pass has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2024-11-06. Highest priority: CVE-2024-49405 (score 22/100).
- CVE-2024-49405 MEDIUM 5.3 UPGRADE Improper authentication in Private Info in Samsung Pass in prior to version 4.4.04.7 allows physical attackers
FAQ
How do I fix pass vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pass being exploited right now?
None of the tracked pass CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pass CVE should I patch first?
CVE-2024-49405 currently ranks highest (22/100): Improper authentication in Private Info in Samsung Pass in prior to version 4.4.04.7 allows physical attackers.