samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: video_player

Improper privilege management vulnerability in Samsung Video Player prior to version 7.3.15.30 allows attackers to execute video files without permiss...

📅 2022-02-11
CVSS 4.2 Dossier →
Component: smarttagplugin

Improper input validation vulnerability in SmartTagPlugin prior to version 1.2.15-6 allows privileged attackers to trigger a XSS on a victim's devices...

📅 2022-02-11
CVSS 5.7 Dossier →
Component: livewallpaperservice

An improper access control in LiveWallpaperService prior to versions 3.0.9.0 allows to create a specific named system directory without a proper permi...

📅 2022-02-11
CVSS 2.2 Dossier →
Component: searchwidget

Improper access control vulnerability in Samsung SearchWidget prior to versions 2.3.00.6 in China models allows untrusted applications to load arbitra...

📅 2022-02-11
CVSS 4.0 Dossier →
Component: bixby_vision

Exposure of Sensitive Information vulnerability in Bixby Vision prior to version 3.7.50.6 allows attackers to access internal data of Bixby Vision via...

📅 2022-02-11
CVSS 4.0 Dossier →
Component: link_sharing

Improper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activity via PreconditionActivity....

📅 2022-02-11
CVSS 4.0 Dossier →
Component: camera

Improper access control vulnerability in Camera prior to versions 11.1.02.16 in Android R(11), 10.5.03.77 in Android Q(10) and 9.0.6.68 in Android P(9...

📅 2022-02-11
CVSS 6.2 Dossier →
Component: wear_os

Unprotected component vulnerability in StTheaterModeDurationAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted ap...

📅 2022-02-11
CVSS 4.0 Dossier →
Component: wear_os

Unprotected component vulnerability in StTheaterModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to...

📅 2022-02-11
CVSS 4.0 Dossier →
Component: wear_os

Unprotected component vulnerability in StBedtimeModeAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applicatio...

📅 2022-02-11
CVSS 4.0 Dossier →
Component: wear_os

An Improper access control vulnerability in StBedtimeModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applicatio...

📅 2022-02-11
CVSS 3.3 Dossier →
Component: bixby

A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below allows attackers ...

📅 2022-02-11
CVSS 4.4 Dossier →
Component: reminder

Improper access control vulnerability in Reminder prior to versions 12.3.01.3000 in Android S(12), 12.2.05.6000 in Android R(11) and 11.6.08.6000 in A...

📅 2022-02-11
CVSS 4.3 Dossier →
Component: internet

Incorrect download source UI in Downloads in Samsung Internet prior to 16.0.6.23 allows attackers to perform domain spoofing via a crafted HTML page....

📅 2022-01-14
CVSS 6.5 Dossier →
Component: s_assistant

Improper access control vulnerability in S Assistant prior to version 7.5 allows attacker to remotely get senstive information....

📅 2022-01-10
CVSS 5.3 Dossier →
Component: galaxy_store

Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist....

📅 2022-01-10
CVSS 7.5 Dossier →
Component: samsung_email

Abitrary file access vulnerability in Samsung Email prior to 6.1.60.16 allows attacker to read isolated data in sandbox....

📅 2022-01-10
CVSS 3.9 Dossier →
Component: bixby_routines

A vulnerability using PendingIntent in Bixby Routines prior to version 3.1.21.8 in Android R(11.0) and 2.6.30.5 in Android Q(10.0) allows attackers to...

📅 2022-01-10
CVSS 4.4 Dossier →
Component: reminder

A vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Android S(12.0) allows attackers to ...

📅 2022-01-10
CVSS 4.4 Dossier →
Component: internet

Improper authentication vulnerability in Samsung Internet prior to 16.0.2.19 allows attackers to bypass secret mode password authentication...

📅 2022-01-10
CVSS 5.7 Dossier →
Component: health

Improper session management vulnerability in Samsung Health prior to 6.20.1.005 prevents logging out from Samsung Health App....

📅 2022-01-10
CVSS 2.8 Dossier →
Component: syncthru_web_service

The SyncThru Web Service on Samsung SCX-6x55X printers allows an attacker to gain access to a list of SMB users and cleartext passwords by reading the...

📅 2021-12-20
CVSS 7.5 Dossier →
Component: pay

Improper export of Android application components vulnerability in Samsung Pay (India only) prior to version 4.1.77 allows attacker to access Bill Pay...

📅 2021-12-08
CVSS 3.8 Dossier →
Component: blockchain_wallet

Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privileged action....

📅 2021-12-08
CVSS 4.0 Dossier →
Page 48 of 62 (1,475 Total Records)