samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: magician

An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows. An attacker can achieve Elevation of Privileges to SYSTEM by exploiting insecu...

📅 2025-09-02
CVSS 5.3 Dossier →
Component: galaxy_wearable

Improper access control in Galaxy Wearable prior to version 2.2.63.25042861 allows local attackers to access sensitive information....

📅 2025-08-06
CVSS 3.3 Dossier →
Component: blockchain_keystore

Out-of-bounds write in drawing pinpad in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-of-bounds memory...

📅 2025-08-06
CVSS 5.7 Dossier →
Component: blockchain_keystore

Out-of-bounds write in creating bitmap images in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-of-bound...

📅 2025-08-06
CVSS 5.7 Dossier →
Component: health

Improper authorization in Samsung Health prior to version 6.30.1.003 allows local attackers to access data in Samsung Health. User interaction is requ...

📅 2025-08-06
CVSS 5.5 Dossier →
Component: blockchain_keystore

Out-of-bounds read in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to read out-of-bounds memory....

📅 2025-08-06
CVSS 4.4 Dossier →
Component: blockchain_keystore

Out-of-bounds write in detaching crypto box in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-of-bounds ...

📅 2025-08-06
CVSS 6.3 Dossier →
Component: android

Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document scanner's privilege....

📅 2025-08-06
CVSS 4.0 Dossier →
Component: android

Improper export of android application component in Emergency SoS prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive informati...

📅 2025-08-06
CVSS 4.3 Dossier →
Component: android

Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to deactivate Samsung account....

📅 2025-08-06
CVSS 6.0 Dossier →
Component: android

Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access device identifier....

📅 2025-08-06
CVSS 4.0 Dossier →
Component: exynos_2100_firmware

An issue was discovered in Samsung Mobile Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480, and 2400. A lack of a JPEG length check leads to an out...

📅 2025-08-04
CVSS 6.5 Dossier →
Component: data_management_server_firmware

An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on the filesy...

📅 2025-07-29
CVSS 6.1 Dossier →
Component: data_management_server_firmware

An 'Arbitrary File Creation' in Samsung DMS(Data Management Server) allows attackers to create arbitrary files in unintended locations on the filesyst...

📅 2025-07-29
CVSS 6.4 Dossier →
Component: data_management_server_firmware

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Samsung DMS(Data Management Server) allows authenticated attackers t...

📅 2025-07-29
CVSS 7.1 Dossier →
Component: data_management_server_firmware

Absolute Path Traversal in Samsung DMS(Data Management Server) allows authenticated attacker (Administrator) to read sensitive files...

📅 2025-07-29
CVSS 4.9 Dossier →
Component: data_management_server_firmware

Deserialization of Untrusted Data in Samsung DMS(Data Management Server) allows attackers to execute arbitrary code via write file to system...

📅 2025-07-29
CVSS 8.0 Dossier →
Component: data_management_server_firmware

An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions. An attacker coul...

📅 2025-07-29
CVSS 6.5 Dossier →
CVE-2025-54455 CRITICAL
Component: magicinfo_9_server

Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Serv...

📅 2025-07-23
CVSS 9.1 Dossier →
CVE-2025-54454 CRITICAL
Component: magicinfo_9_server

Use of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Serv...

📅 2025-07-23
CVSS 9.1 Dossier →
Component: magicinfo_9_server

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Inj...

📅 2025-07-23
CVSS 8.8 Dossier →
Component: magicinfo_9_server

Improper Authentication vulnerability in Samsung Electronics MagicINFO 9 Server allows Authentication Bypass.This issue affects MagicINFO 9 Server: le...

📅 2025-07-23
CVSS 7.3 Dossier →
CVE-2025-54451 CRITICAL
Component: magicinfo_9_server

Improper Control of Generation of Code ('Code Injection') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue aff...

📅 2025-07-23
CVSS 9.8 Dossier →
Component: magicinfo_9_server

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Inj...

📅 2025-07-23
CVSS 7.2 Dossier →
Page 11 of 62 (1,475 Total Records)