samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: blockchain_keystore

Protection Mechanism Failure in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.13.5 allows local attacker to execute arbitrary ...

📅 2023-09-06
CVSS 5.5 Dossier →
Component: android

Insertion of sensitive information into log vulnerability in Locksettings prior to SMR Sep-2023 Release 1 allows a privileged local attacker to get lo...

📅 2023-09-06
CVSS 4.4 Dossier →
Component: android

PendingIntent hijacking in LmsAssemblyTrackerCTC prior to SMR Sep-2023 Release 1 allows local attacker to gain arbitrary file access....

📅 2023-09-06
CVSS 4.7 Dossier →
Component: android

Exposure of Sensitive Information vulnerability in InboundSmsHandler prior to SMR Sep-2023 Release 1 allows local attackers to access certain message ...

📅 2023-09-06
CVSS 4.0 Dossier →
Component: android

Improper export of android application components vulnerability in WifiApAutoHotspotEnablingActivity prior to SMR Sep-2023 Release 1 allows local atta...

📅 2023-09-06
CVSS 4.0 Dossier →
Component: android

Sensitive information exposure vulnerability in SVCAgent prior to SMR Sep-2023 Release 1 allows attackers to get unresettable identifiers....

📅 2023-09-06
CVSS 4.0 Dossier →
Component: android

Improper access control vulnerability in SVCAgent prior to SMR Sep-2023 Release 1 allows attackers to trigger certain commands....

📅 2023-09-06
CVSS 4.0 Dossier →
Component: android

Improper access control vulnerability in Weather prior to SMR Sep-2023 Release 1 allows attackers to access location information set in Weather withou...

📅 2023-09-06
CVSS 4.0 Dossier →
Component: android

Improper authorization vulnerability in FolderContainerDragDelegate in One UI Home prior to SMR Sep-2023 Release 1 allows physical attackers to change...

📅 2023-09-06
CVSS 4.6 Dossier →
Component: android

Improper privilege management vulnerability in FolderLockNotifier in One UI Home prior to SMR Sep-2023 Release 1 allows local attackers to change some...

📅 2023-09-06
CVSS 6.2 Dossier →
Component: android

Improper input validation in Settings Suggestions prior to SMR Sep-2023 Release 1 allows attackers to launch arbitrary activity....

📅 2023-09-06
CVSS 6.8 Dossier →
Component: android

Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider....

📅 2023-09-06
CVSS 4.0 Dossier →
Component: android

Improper input validation vulnerability in Knox AI prior to SMR Sep-2023 Release 1 allows local attackers to launch privileged activities....

📅 2023-09-06
CVSS 8.5 Dossier →
Component: android

Improper access control in Dual Messenger prior to SMR Sep-2023 Release 1 allows local attackers launch activity with system privilege....

📅 2023-09-06
CVSS 7.9 Dossier →
Component: android

Improper authentication in SecSettings prior to SMR Sep-2023 Release 1 allows attacker to access Captive Portal Wi-Fi in Reactivation Lock status....

📅 2023-09-06
CVSS 4.6 Dossier →
Component: android

Improper input validation vulnerability in FileProviderStatusReceiver in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows local attackers to de...

📅 2023-09-06
CVSS 4.0 Dossier →
Component: android

Improper authorization in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows attacker to read arbitrary file with system privilege....

📅 2023-09-06
CVSS 7.5 Dossier →
Component: exynos_9810_firmware

An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110...

📅 2023-08-28
CVSS 7.5 Dossier →
Component: syncthru_web_service

An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges via MITM attacks....

📅 2023-08-22
CVSS 7.5 Dossier →
Component: sww-3400rw_firmware

A reflected cross site scripting (XSS) vulnerability was discovered on Samsung sww-3400rw Router devices via the m2 parameter of the sess-bin/command....

📅 2023-08-22
CVSS 6.1 Dossier →
Component: harman_infotainment

Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object....

📅 2023-08-14
CVSS 6.8 Dossier →
Component: harman_infotainment

Harman Infotainment 20190525031613 and later discloses the IP address via CarPlay CTRL packets....

📅 2023-08-14
CVSS 4.3 Dossier →
Component: harman_infotainment

Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name....

📅 2023-08-14
CVSS 6.8 Dossier →
Component: galaxy_store

Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.56.6?allows local attackers to access privileged content providers as Ga...

📅 2023-08-10
CVSS 6.8 Dossier →
Page 34 of 62 (1,475 Total Records)