samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: account

Use of implicit intent for sensitive communication vulnerability in startEmailValidationActivity in Samsung Account prior to version 14.5.00.7 allows ...

📅 2023-11-07
CVSS 5.5 Dossier →
Component: account

Use of implicit intent for sensitive communication vulnerability in startAgreeToDisclaimerActivity in Samsung Account prior to version 14.5.00.7 allow...

📅 2023-11-07
CVSS 5.5 Dossier →
Component: phone

Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, ...

📅 2023-11-07
CVSS 5.5 Dossier →
Component: quick_share

Improper access control vulnerability in Quick Share prior to 13.5.52.0 allows local attacker to access local files....

📅 2023-11-07
CVSS 5.5 Dossier →
Component: bixby_voice

Improper verification of intent by broadcast receiver vulnerability in Bixby Voice prior to version 3.3.35.12 allows attackers to access arbitrary dat...

📅 2023-11-07
CVSS 6.2 Dossier →
Component: push_service

Improper access control vulnerability in Samsung Push Service prior to 3.4.10 allows local attackers to get register ID to identify the device....

📅 2023-11-07
CVSS 3.3 Dossier →
Component: push_service

Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id....

📅 2023-11-07
CVSS 4.0 Dossier →
Component: account

Improper access control vulnerability in Samsung Account prior to version 14.5.01.1 allows attackers to access sensitive information via implicit inte...

📅 2023-11-07
CVSS 4.0 Dossier →
Component: health

PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows local attackers to access data....

📅 2023-11-07
CVSS 4.7 Dossier →
Component: android

An improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and w...

📅 2023-11-07
CVSS 5.9 Dossier →
Component: android

An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write....

📅 2023-11-07
CVSS 8.4 Dossier →
Component: android

An improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write....

📅 2023-11-07
CVSS 8.4 Dossier →
Component: android

Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code....

📅 2023-11-07
CVSS 8.4 Dossier →
Component: android

Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files with system ...

📅 2023-11-07
CVSS 6.3 Dossier →
Component: android

Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel....

📅 2023-11-07
CVSS 6.6 Dossier →
Component: android

Improper Certificate Validation in FotaAgent prior to SMR Nov-2023 Release1 allows remote attacker to intercept the network traffic including Firmware...

📅 2023-11-07
CVSS 5.9 Dossier →
Component: android

Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on starting activi...

📅 2023-11-07
CVSS 6.2 Dossier →
Component: android

Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct without User In...

📅 2023-11-07
CVSS 6.7 Dossier →
Component: android

Out-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to execute arbitrary code....

📅 2023-11-07
CVSS 6.7 Dossier →
Component: android

Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary...

📅 2023-11-07
CVSS 6.7 Dossier →
Component: android

Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to expose sensitive i...

📅 2023-11-07
CVSS 5.6 Dossier →
Component: android

Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code....

📅 2023-11-07
CVSS 6.7 Dossier →
Component: galaxy_book_firmware

An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galax...

📅 2023-10-04
CVSS 5.5 Dossier →
Component: health

Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via implicit inte...

📅 2023-10-04
CVSS 4.0 Dossier →
Page 32 of 62 (1,475 Total Records)