samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: nearby_device_scanning

Improper access control vulnerability in Nearby device scanning prior version 11.1.14.7 allows local attacker to access data....

๐Ÿ“… 2024-01-04
CVSS 4.0 Dossier →
Component: email

Implicit intent hijacking vulnerability in Samsung Email prior to version 6.1.90.16 allows local attacker to get sensitive information....

๐Ÿ“… 2024-01-04
CVSS 3.3 Dossier →
Component: android

Improper access control in Notification service prior to SMR Jan-2024 Release 1 allows local attacker to access notification data....

๐Ÿ“… 2024-01-04
CVSS 6.2 Dossier →
Component: android

Path traversal vulnerability in ZipCompressor of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Andro...

๐Ÿ“… 2024-01-04
CVSS 3.3 Dossier →
Component: android

Path traversal vulnerability in FileUriConverter of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in An...

๐Ÿ“… 2024-01-04
CVSS 4.0 Dossier →
Component: android

Improper authentication vulnerability in Bluetooth pairing process prior to SMR Jan-2024 Release 1 allows remote attackers to establish pairing proces...

๐Ÿ“… 2024-01-04
CVSS 6.8 Dossier →
Component: dex

Improper access control vulnerability in Samsung DeX prior to SMR Jan-2024 Release 1 allows owner to access other users' notification in a multi-u...

๐Ÿ“… 2024-01-04
CVSS 4.6 Dossier →
Component: exynos_9820_firmware

A race condition issue discovered in Samsung Mobile Processor Exynos 9820, 980, 1080, 2100, 2200, 1280, and 1380 allows unintended modifications of va...

๐Ÿ“… 2023-12-13
CVSS 4.0 Dossier →
Component: exynos_980_firmware

Samsung Mobile Processor and Wearable Processor (Exynos 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, and W920) allow Information Disclosure in the Bo...

๐Ÿ“… 2023-12-13
CVSS 4.8 Dossier →
Component: exynos_9820_firmware

A TOCTOU race condition in Samsung Mobile Processor Exynos 9820, Exynos 980, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, and Exynos 1380 can c...

๐Ÿ“… 2023-12-13
CVSS 6.3 Dossier →
Component: escargot

Improper input validation vulnerability in Samsung Open Source Escargot allows stack overflow and segmentation fault.ย This issue affects Escargot: fro...

๐Ÿ“… 2023-12-06
CVSS 5.3 Dossier →
Component: galaxy_store

Improper URL validation from InstantPlay deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to access data....

๐Ÿ“… 2023-12-05
CVSS 7.5 Dossier →
Component: galaxy_store

Improper URL validation from MCSLaunch deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to install APK fr...

๐Ÿ“… 2023-12-05
CVSS 7.5 Dossier →
Component: samsung_keyboard

Improper usage of insecure protocol (i.e. HTTP) in SogouSDK of Chinese Samsung Keyboard prior to versions 5.3.70.1 in Android 11, 5.4.60.49, 5.4.85.5,...

๐Ÿ“… 2023-12-05
CVSS 6.5 Dossier →
Component: cloud

Improper handling of insufficient permissions or privileges vulnerability in Samsung Data Store prior to version 5.2.00.7 allows remote attackers to a...

๐Ÿ“… 2023-12-05
CVSS 6.5 Dossier →
Component: samsung_voice_recorder

Improper Access Control in Samsung Voice Recorder prior to versions 21.4.15.01 in Android 12 and Android 13, 21.4.50.17 in Android 14 allows physical ...

๐Ÿ“… 2023-12-05
CVSS 6.8 Dossier →
Component: pass

Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid exc...

๐Ÿ“… 2023-12-05
CVSS 5.4 Dossier →
Component: pass

Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid fla...

๐Ÿ“… 2023-12-05
CVSS 5.4 Dossier →
Component: gamehomecn

Improper access control vulnerablility in GameHomeCN prior to version 4.2.60.2 allows local attackers to launch arbitrary activity in GameHomeCN....

๐Ÿ“… 2023-12-05
CVSS 5.1 Dossier →
Component: search_widget

PendingIntent hijacking vulnerability in Search Widget prior to version 3.4 in China models allows local attackers to access data....

๐Ÿ“… 2023-12-05
CVSS 4.7 Dossier →
Component: account_web_software_development_kit

Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information....

๐Ÿ“… 2023-12-05
CVSS 3.3 Dossier →
Component: find_my_mobile

Abuse of remote unlock in Find My Mobile prior to version 7.3.13.4 allows physical attacker to unlock the device remotely by resetting the Samsung Acc...

๐Ÿ“… 2023-12-05
CVSS 7.6 Dossier →
Component: android

Improper access control vulnerability in KnoxCustomManagerService prior to SMR Dec-2023 Release 1 allows attacker to access device SIM PIN....

๐Ÿ“… 2023-12-05
CVSS 5.9 Dossier →
Component: android

Improper authorization verification vulnerability in AR Emoji prior to SMR Dec-2023 Release 1 allows attackers to read sandbox data of AR Emoji....

๐Ÿ“… 2023-12-05
CVSS 4.0 Dossier →
Page 30 of 62 (1,475 Total Records)