samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: galaxy_wearable

Implicit Intent hijacking vulnerability in Galaxy Wearable prior to version 2.2.50 allows attacker to get sensitive information....

📅 2022-08-05
CVSS 4.0 Dossier →
Component: samsung_email

Intent redirection vulnerability using implicit intent in Samsung email prior to version 6.1.70.20 allows attacker to get sensitive information....

📅 2022-08-05
CVSS 6.2 Dossier →
Component: charm_firmware

Unprotected provider vulnerability in Charm by Samsung prior to version 1.2.3 allows attackers to read connection state without permission....

📅 2022-08-05
CVSS 6.2 Dossier →
Component: samsung_internet_browser

Implicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34 allows attackers to access arbitrary files....

📅 2022-08-05
CVSS 3.3 Dossier →
Component: game_launcher

Exposure of Sensitive Information vulnerability in Game Launcher prior to version 6.0.07 allows local attacker to access app data with user interactio...

📅 2022-08-05
CVSS 3.3 Dossier →
Component: gameoptimizingservice

Improper Privilege Management vulnerability in Game Optimizing Service prior to versions 3.3.04.0 in Android 10, and 3.5.04.8 in Android 11 and above ...

📅 2022-08-05
CVSS 7.3 Dossier →
Component: cameralyzer

Improper access control vulnerability in WebApp in Cameralyzer prior to versions 3.2.22, 3.3.22, 3.4.22 and 3.5.51 allows attackers to access external...

📅 2022-08-05
CVSS 4.0 Dossier →
Component: notes

Path traversal vulnerability in UriFileUtils of Samsung Notes prior to version 4.3.14.39 allows attacker to access some file as Samsung Notes permissi...

📅 2022-08-05
CVSS 6.2 Dossier →
Component: charm_firmware

PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without ...

📅 2022-08-05
CVSS 6.2 Dossier →
Component: charm_firmware

PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permis...

📅 2022-08-05
CVSS 6.2 Dossier →
Component: charm

Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection infor...

📅 2022-08-05
CVSS 6.2 Dossier →
Component: charm

Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection informat...

📅 2022-08-05
CVSS 6.2 Dossier →
Component: mtower

The TEE_PopulateTransientObject and __utee_from_attr functions in Samsung mTower 0.3.0 allow a trusted application to trigger a memory overwrite, deni...

📅 2022-08-04
CVSS 7.8 Dossier →
Component: cloud

Implicit Intent hijacking vulnerability in Samsung Cloud prior to version 5.2.0 allows attacker to get sensitive information....

📅 2022-07-12
CVSS 7.5 Dossier →
Component: camera

Intent redirection vulnerability using implict intent in Camera prior to versions 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S(...

📅 2022-07-12
CVSS 5.3 Dossier →
Component: android_usb_driver

Improper validation of integrity check vulnerability in Samsung USB Driver Windows Installer for Mobile Phones prior to version 1.7.56.0 allows local ...

📅 2022-07-12
CVSS 5.5 Dossier →
Component: galaxy_store

Improper input validation vulnerability in BillingPackageInsraller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activiti...

📅 2022-07-12
CVSS 7.8 Dossier →
Component: galaxy_store

Improper input validation vulnerability in ApexPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities ...

📅 2022-07-12
CVSS 7.8 Dossier →
Component: galaxy_store

Improper input validation vulnerability in AppsPackageInstaller in Galaxy Store prior to version 4.5.41.8 allows local attackers to launch activities ...

📅 2022-07-12
CVSS 7.8 Dossier →
Component: find_my_mobile

Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device....

📅 2022-07-12
CVSS 5.3 Dossier →
Component: samsung_gallery

Improper access control vulnerability in Samsung Gallery prior to version 13.1.05.8 allows physical attackers to access the pictures using S Pen air g...

📅 2022-07-12
CVSS 2.4 Dossier →
Component: calendar

Information exposure in Calendar prior to version 12.3.05.10000 allows attacker to access calendar schedule without READ_CALENDAR permission....

📅 2022-07-12
CVSS 3.3 Dossier →
Component: smartthings

Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart devices by bypassing login acti...

📅 2022-06-07
CVSS 3.3 Dossier →
Component: members

Unprotected dynamic receiver in Samsung Members prior to version 4.2.005 allows attacker to launch arbitrary activity....

📅 2022-06-07
CVSS 4.0 Dossier →
Page 45 of 62 (1,475 Total Records)