samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: samsung_security_supporter

Improper access control vulnerability in Samsung Security Supporter prior to version 1.2.40.0 allows attacker to set the arbitrary folder as Secret Fo...

📅 2022-04-11
CVSS 4.4 Dossier →
Component: members

Improper access control vulnerability in Samsung Members prior to version 13.6.08.5 allows local attacker to execute call function without CALL_PHONE ...

📅 2022-04-11
CVSS 4.3 Dossier →
Component: galaxy_store

Improper access control vulnerability in Galaxy Store prior to version 4.5.36.4 allows attacker to install applications from Galaxy Store without user...

📅 2022-04-11
CVSS 5.9 Dossier →
Component: samsung_flow

Improper access control vulnerability in Samsung Flow prior to version 4.8.06.5 allows attacker to write the file without Samsung Flow permission....

📅 2022-04-11
CVSS 5.1 Dossier →
Component: galaxy_store

Path traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to version 4.5.40.5 allows attacker to access the file ...

📅 2022-04-11
CVSS 6.2 Dossier →
Component: samsung_flow

Path traversal vulnerability in Samsung Flow prior to version 4.8.07.4 allows local attackers to read arbitrary files as Samsung Flow permission....

📅 2022-04-11
CVSS 4.0 Dossier →
Component: galaxy_store

Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access privileged content providers as Ga...

📅 2022-04-11
CVSS 6.8 Dossier →
Component: update

Uncontrolled search path element vulnerability in Samsung Update prior to version 3.0.77.0 allows attackers to execute arbitrary code as Samsung Updat...

📅 2022-04-11
CVSS 5.9 Dossier →
Component: kies

DLL hijacking vulnerability in Kies prior to version 2.6.4.22014_2 allows attacker to execute abitrary code....

📅 2022-04-11
CVSS 6.2 Dossier →
Component: smart_switch_pc

DLL hijacking vulnerability in Smart Switch PC prior to version 4.2.22022_4 allows attacker to execute abitrary code....

📅 2022-04-11
CVSS 6.2 Dossier →
Component: samsung_pass

Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that is previously running without a...

📅 2022-04-11
CVSS 4.3 Dossier →
Component: recovery

Improper access control vulnerability in SamsungRecovery prior to version 8.1.43.0 allows local attckers to delete arbitrary files as SamsungRecovery ...

📅 2022-04-11
CVSS 4.4 Dossier →
Component: internet

Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab without proper...

📅 2022-04-11
CVSS 3.3 Dossier →
Component: factorycamera

Improper access control vulnerability in FactoryCamera prior to version 2.1.96 allows attacker to access the file with system privilege....

📅 2022-04-11
CVSS 7.7 Dossier →
Component: accessibility

A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R(11.0) and 13.0.1.1 in Android S(12.0) allows attacker to a...

📅 2022-04-11
CVSS 4.4 Dossier →
Component: t5_firmware

A DLL hijacking vulnerability in Samsung portable SSD T5 PC software before 1.6.9 could allow a local attacker to escalate privileges. (An attacker mu...

📅 2022-04-05
CVSS 7.3 Dossier →
Component: galaxy_watch_3_plugin

Information Exposure vulnerability in Galaxy Watch3 Plugin prior to version 2.2.09.22012751 allows attacker to access password information of connecte...

📅 2022-03-10
CVSS 1.9 Dossier →
Component: watch_active2_plugin

Information Exposure vulnerability in Watch Active2 Plugin prior to version 2.2.08.22012751 allows attacker to access password information of connecte...

📅 2022-03-10
CVSS 1.9 Dossier →
Component: watch_active_plugin

Information Exposure vulnerability in Watch Active Plugin prior to version 2.2.07.22012751 allows attacker to access password information of connected...

📅 2022-03-10
CVSS 1.9 Dossier →
Component: galaxy_watch_plugin

Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.22012751 allows attacker to access password information of connected...

📅 2022-03-10
CVSS 1.9 Dossier →
Component: galaxy_watch_3_plugin

Information Exposure vulnerability in Galaxy S3 Plugin prior to version 2.2.03.22012751 allows attacker to access password information of connected Wi...

📅 2022-03-10
CVSS 1.9 Dossier →
Component: bixby_touch

Improper access control vulnerability in BixbyTouch prior to version 2.2.00.6 in China models allows untrusted applications to load arbitrary URL and ...

📅 2022-03-10
CVSS 4.0 Dossier →
Component: galaxy_watch_plugin

Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.220126741 allows attackers to access user information in log....

📅 2022-03-10
CVSS 1.9 Dossier →
Component: wear_os

An Improper access control vulnerability in StRetailModeReceiver in Wear OS 3.0 prior to Firmware update MAR-2022 Release allows untrusted application...

📅 2022-03-10
CVSS 4.4 Dossier →
Page 47 of 62 (1,475 Total Records)