samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: android

Path traversal in ShortcutService prior to SMR Feb-2026 Release 1 allows privileged local attacker to create file with system privilege....

📅 2026-02-04
CVSS 6.0 Dossier →
Component: android

Improper input validation in FacAtFunction prior to SMR Feb-2026 Release 1 allows privileged physical attacker to execute arbitrary command with syste...

📅 2026-02-04
CVSS 6.6 Dossier →
Component: android

Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary commands....

📅 2026-02-04
CVSS 6.8 Dossier →
Component: android

Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings privilege....

📅 2026-02-04
CVSS 7.8 Dossier →
Component: android

Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persistence configuration of the appli...

📅 2026-02-04
CVSS 6.1 Dossier →
Component: android

Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows local attackers to interrupt its functioning....

📅 2026-02-04
CVSS 5.5 Dossier →
Component: exynos_990_firmware

An issue was discovered in Samsung Mobile Processor, Wearable Processor and Modem Exynos 980, 990, 850, 1080, 9110, W920, W930, W1000 and Modem 5123. ...

📅 2026-02-03
CVSS 7.5 Dossier →
Component: exynos_980_firmware

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W9...

📅 2026-02-03
CVSS 5.5 Dossier →
Component: exynos_980_firmware

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W9...

📅 2026-02-03
CVSS 5.5 Dossier →
Component: exynos_980_firmware

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W9...

📅 2026-02-03
CVSS 5.5 Dossier →
Component: exynos_980_firmware

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W9...

📅 2026-02-03
CVSS 5.5 Dossier →
Component: exynos_980_firmware

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W9...

📅 2026-02-03
CVSS 6.2 Dossier →
Component: exynos_980_firmware

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W9...

📅 2026-02-03
CVSS 5.5 Dossier →
Component: exynos_980_firmware

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W9...

📅 2026-02-03
CVSS 6.2 Dossier →
Component: exynos_980_firmware

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W9...

📅 2026-02-03
CVSS 6.2 Dossier →
Component: exynos_980_firmware

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W9...

📅 2026-02-03
CVSS 6.2 Dossier →
CVE-2026-25202 CRITICAL
Component: magicinfo_9_server

The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue affects Ma...

📅 2026-02-02
CVSS 9.8 Dossier →
Component: magicinfo_9_server

An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server. This issue affects Ma...

📅 2026-02-02
CVSS 8.8 Dossier →
CVE-2026-25200 CRITICAL
Component: magicinfo_9_server

A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in a...

📅 2026-02-02
CVSS 9.8 Dossier →
Component: galaxy_store

Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script....

📅 2026-01-09
CVSS 7.8 Dossier →
Component: cloud

Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers to access specific files in arbitrary pat...

📅 2026-01-09
CVSS 5.5 Dossier →
Component: android

Improper input validation in data related to network restrictions prior to SMR Jan-2026 Release 1 allows physical attackers to bypass Carrier Relock....

📅 2026-01-09
CVSS 4.6 Dossier →
Component: android

Out-of-bounds read in libimagecodec.quram.so prior to SMR Jan-2026 Release 1 allows remote attacker to access out-of-bounds memory....

📅 2026-01-09
CVSS 5.3 Dossier →
Component: android

Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows local attackers to enable UWB....

📅 2026-01-09
CVSS 3.3 Dossier →
Page 5 of 62 (1,475 Total Records)