samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: t-oscpakuc_firmware

The Samsung TV (2021 and 2022 model) smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activatin...

📅 2022-12-13
CVSS 4.6 Dossier →
Component: calendar

Improper access control vulnerability in Calendar prior to versions 11.6.08.0 in Android Q(10), 12.2.11.3000 in Android R(11), 12.3.07.2000 in Android...

📅 2022-12-08
CVSS 3.3 Dossier →
Component: pass

Improper check or handling of exceptional conditions vulnerability in Samsung Pass prior to version 4.0.06.1 allows attacker to access Samsung Pass....

📅 2022-12-08
CVSS 4.8 Dossier →
Component: pass

Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data of Samsung Pass on a certain s...

📅 2022-12-08
CVSS 3.9 Dossier →
Component: gear_iconx_pc_manager

Insufficient verification of data authenticity vulnerability in Samsung Gear IconX PC Manager prior to version 2.1.221019.51 allows local attackers to...

📅 2022-12-08
CVSS 7.1 Dossier →
Component: exynos_firmware

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emerg...

📅 2022-12-08
CVSS 6.5 Dossier →
Component: exynos_firmware

Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption between UE...

📅 2022-12-08
CVSS 6.5 Dossier →
Component: galaxy_buds_pro_manage

Sensitive information exposure vulnerability in FmmBaseModel in Galaxy Buds Pro Manage prior to version 4.1.22092751 allows local attackers with log a...

📅 2022-11-09
CVSS 3.3 Dossier →
Component: pass

Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature....

📅 2022-11-09
CVSS 3.6 Dossier →
Component: editor_lite

Heap overflow vulnerability in parse_pce function in libsavsaudio.so in Editor Lite prior to version 4.0.41.3 allows attacker to get information....

📅 2022-11-09
CVSS 4.3 Dossier →
Component: billing

Improper Authorization in Samsung Billing prior to version 5.0.56.0 allows attacker to get sensitive information....

📅 2022-11-09
CVSS 6.2 Dossier →
Component: galaxywatch4plugin

Improper access control vulnerability in GalaxyWatch4Plugin prior to versions 2.2.11.22101351 and 2.2.12.22101351 allows attackers to access wearable ...

📅 2022-11-09
CVSS 4.0 Dossier →
Component: exynos_firmware

Improper input validation vulnerability for processing SIB12 PDU in Exynos modems prior to SMR Sep-2022 Release allows remote attacker to read out of ...

📅 2022-11-09
CVSS 5.3 Dossier →
Component: checkout

Improper access control vulnerability in Samsung Checkout prior to version 5.0.55.3 allows attackers to access sensitive information via implicit inte...

📅 2022-10-07
CVSS 4.0 Dossier →
Component: group_sharing

Improper access control vulnerability in ProfileSharingAccount in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(1...

📅 2022-10-07
CVSS 4.0 Dossier →
Component: reminder

Insertion of Sensitive Information into Log in PushRegIdUpdateClient of SReminder prior to 8.2.01.13 allows attacker to access device IMEI....

📅 2022-10-07
CVSS 5.9 Dossier →
Component: account

Improper component protection vulnerability in Samsung Account prior to version 13.5.0 allows attackers to unauthorized logout....

📅 2022-10-07
CVSS 5.1 Dossier →
Component: account

Sensitive log information leakage vulnerability in Samsung Account prior to version 13.5.0 allows attackers to unauthorized logout....

📅 2022-10-07
CVSS 4.0 Dossier →
Component: internet

Improper authorization vulnerability in Samsung Internet prior to version 18.0.4.14 allows physical attackers to add bookmarks in secret mode without ...

📅 2022-10-07
CVSS 4.3 Dossier →
Component: sharelive

Improper restriction of broadcasting Intent in ShareLive prior to version 13.2.03.5 leaks MAC address of the connected Bluetooth device....

📅 2022-10-07
CVSS 5.9 Dossier →
Component: smartthings

Improper access control vulnerability cloudNotificationManager.java in SmartThings prior to version 1.7.89.0 allows attackers to access sensitive info...

📅 2022-10-07
CVSS 4.0 Dossier →
Component: smartthings

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive info...

📅 2022-10-07
CVSS 4.0 Dossier →
Component: smartthings

Improper access control vulnerability in cloudNotificationManager.java SmartThings prior to version 1.7.89.0 allows attackers to access sensitive info...

📅 2022-10-07
CVSS 4.0 Dossier →
Component: smartthings

Improper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89.0 allows attackers to access sensitive information v...

📅 2022-10-07
CVSS 4.0 Dossier →
Page 42 of 62 (1,475 Total Records)