samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: flow

Improper cryptographic implementation in Samsung Flow for Android prior to version 4.9.04 allows adjacent attackers to decrypt encrypted messages or i...

📅 2023-02-09
CVSS 7.5 Dossier →
Component: android

Improper access control vulnerability in Runestone application prior to version 2.9.09.003 in Android R(11) and 3.2.01.007 in Android S(12) allows loc...

📅 2023-02-09
CVSS 4.0 Dossier →
Component: android

Insufficient Verification of Data Authenticity vulnerability in Routine prior to versions 2.6.30.6 in Android Q(10), 3.1.21.10 in Android R(11) and 3....

📅 2023-02-09
CVSS 7.4 Dossier →
Component: android

Improper access control vulnerability in WindowManagerService prior to SMR Feb-2023 Release 1 allows attackers to take a screen capture....

📅 2023-02-09
CVSS 6.2 Dossier →
Component: android

Improper input validation vulnerability in UwbDataTxStatusEvent prior to SMR Feb-2023 Release 1 allows attackers to launch certain activities....

📅 2023-02-09
CVSS 8.5 Dossier →
Component: android

Improper logic in HomeScreen prior to SMR Feb-2023 Release 1 allows physical attacker to access App preview protected by Secure Folder....

📅 2023-02-09
CVSS 2.1 Dossier →
Component: android

Improper access control vulnerability in Phone application prior to SMR Feb-2023 Release 1 allows local attackers to access sensitive information via ...

📅 2023-02-09
CVSS 4.0 Dossier →
Component: android

Improper usage of implicit intent in Contacts prior to SMR Feb-2023 Release 1 allows attacker to get account ID....

📅 2023-02-09
CVSS 3.3 Dossier →
Component: android

Exposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR Feb-2023 Release 1 allows attackers to access the memory address inform...

📅 2023-02-09
CVSS 4.4 Dossier →
Component: galaxy_store

Improper input validation vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to execute JavaScript by launching a web page...

📅 2023-02-09
CVSS 6.2 Dossier →
Component: galaxy_store

Improper access control vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to install applications from Galaxy Store....

📅 2023-02-09
CVSS 7.8 Dossier →
Component: smart_things

Improper access control vulnerabilities in Smart Things prior to 1.7.93 allows to attacker to invite others without authorization of the owner....

📅 2023-02-09
CVSS 4.2 Dossier →
Component: bixby_vision

Improper input validation in Bixby Vision prior to version 3.7.70.17 allows attacker to access data of Bixby Vision....

📅 2023-02-09
CVSS 3.3 Dossier →
Component: android

An out-of-bound read vulnerability in mapToBuffer function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR JAN-2023 Release 1 allows ...

📅 2023-02-09
CVSS 4.4 Dossier →
Component: android

Improper usage of implict intent in ePDG prior to SMR JAN-2023 Release 1 allows attacker to access SSID....

📅 2023-02-09
CVSS 4.0 Dossier →
Component: android

Improper input validation vulnerability in TelephonyUI prior to SMR Jan-2023 Release 1 allows attackers to configure Preferred Call. The patch removes...

📅 2023-02-09
CVSS 4.0 Dossier →
Component: android

Improper access control vulnerability in NfcTile prior to SMR Jan-2023 Release 1 allows to attacker to use NFC without user recognition....

📅 2023-02-09
CVSS 5.4 Dossier →
Component: android

Hardcoded AES key to encrypt cardemulation PINs in NFC prior to SMR Jan-2023 Release 1 allows attackers to access cardemulation PIN....

📅 2023-02-09
CVSS 4.3 Dossier →
Component: android

Improper access control vulnerability in telecom application prior to SMR JAN-2023 Release 1 allows local attackers to get sensitive information....

📅 2023-02-09
CVSS 4.3 Dossier →
Component: android

Improper Handling of Insufficient Permissions or Privileges vulnerability in SemChameleonHelper prior to SMR Jan-2023 Release 1 allows attacker to mod...

📅 2023-02-09
CVSS 5.1 Dossier →
Component: android

Improper authorization vulnerability in ChnFileShareKit prior to SMR Jan-2023 Release 1 allows attacker to control BLE advertising without permission ...

📅 2023-02-09
CVSS 5.1 Dossier →
Component: android

Improper authorization vulnerability in semAddPublicDnsAddr in WifiSevice prior to SMR Jan-2023 Release 1 allows attackers to set custom DNS server wi...

📅 2023-02-09
CVSS 5.7 Dossier →
Component: android

Improper Handling of Insufficient Permissions or Privileges vulnerability in KnoxCustomManagerService prior to SMR Jan-2023 Release 1 allows attacker ...

📅 2023-02-09
CVSS 5.9 Dossier →
Component: android

Use of Externally-Controlled Format String vulnerabilities in STST TA prior to SMR Jan-2023 Release 1 allows arbitrary code execution....

📅 2023-02-09
CVSS 7.3 Dossier →
Page 41 of 62 (1,475 Total Records)