samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: themes

An improper scheme check vulnerability in Samsung Themes prior to version 5.2.01 allows attackers to perform Man-in-the-middle attack....

📅 2021-09-09
CVSS 3.3 Dossier →
Component: capture

An improper file management vulnerability in SamsungCapture prior to version 4.8.02 allows sensitive information leak....

📅 2021-09-09
CVSS 3.3 Dossier →
Component: penup

Improper access control vulnerability in PENUP prior to version 3.8.00.18 allows arbitrary webpage loading in webview....

📅 2021-09-09
CVSS 4.0 Dossier →
Component: drive_manager

Samsung Drive Manager 2.0.104 on Samsung H3 devices allows attackers to bypass intended access controls on disk management. WideCharToMultiByte, WideC...

📅 2021-09-01
CVSS 7.8 Dossier →
Component: tizenrt

Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functions_calloc and mm_zalloc. This improper memory assignment can lead to arbi...

📅 2021-08-31
CVSS 7.5 Dossier →
Component: smart_touch_call

Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in webview....

📅 2021-08-05
CVSS 5.3 Dossier →
Component: smartthings_firmware

Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause local file inclusion in webview...

📅 2021-08-05
CVSS 5.3 Dossier →
Component: smartthings_firmware

Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in we...

📅 2021-08-05
CVSS 5.3 Dossier →
Component: internet

Unprotected component vulnerability in Samsung Internet prior to version 14.2 allows untrusted application to access internal files in Samsung Interne...

📅 2021-08-05
CVSS 5.3 Dossier →
Component: knox_cloud_services

Improper MDM policy management vulnerability in KME module prior to KCS version 1.39 allows MDM users to bypass Knox Manage authentication....

📅 2021-07-08
CVSS 7.5 Dossier →
Component: ar_emoji_editor

Improper input validation vulnerability in AR Emoji Editor prior to version 4.4.03.5 in Android Q(10.0) and above allows untrusted applications to acc...

📅 2021-07-08
CVSS 7.8 Dossier →
Component: factorycamerafb

Improper access control vulnerability in FactoryCameraFB prior to version 3.4.74 allows untrusted applications to access arbitrary files with an escal...

📅 2021-07-08
CVSS 7.8 Dossier →
Component: members

Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and ...

📅 2021-07-08
CVSS 3.3 Dossier →
Component: members

Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and ...

📅 2021-07-08
CVSS 7.8 Dossier →
Component: samsung_members

Information exposure vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and abo...

📅 2021-07-08
CVSS 3.3 Dossier →
Component: cameralyzer

Improper access control vulnerability in Cameralyzer prior to versions 3.2.1041 in 3.2.x, 3.3.1040 in 3.3.x, and 3.4.4210 in 3.4.x allows untrusted ap...

📅 2021-07-08
CVSS 5.5 Dossier →
Component: health

Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to read internal cache data via exported component....

📅 2021-06-11
CVSS 5.3 Dossier →
Component: galaxy_watch_active_2_firmware

Improper authentication vulnerability in Tizen bluetooth-frwk prior to Firmware update JUN-2021 Release allows bluetooth attacker to take over the use...

📅 2021-06-11
CVSS 8.8 Dossier →
Component: watch_active2_plugin

Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version allows attacker with log permissions to leak Wi-Fi pass...

📅 2021-06-11
CVSS 5.5 Dossier →
Component: watch_active_plugin

Improper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151 allows attacker with log permissions to leak Wi-Fi passw...

📅 2021-06-11
CVSS 5.5 Dossier →
Component: galaxy_watch_3_plugin

Improper log management vulnerability in Galaxy Watch3 PlugIn prior to version 2.2.09.21033151 allows attacker with log permissions to leak Wi-Fi pass...

📅 2021-06-11
CVSS 5.5 Dossier →
Component: galaxy_watch_plugin

Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi passw...

📅 2021-06-11
CVSS 5.5 Dossier →
Component: internet

Non-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62 allows attackers to display fake URL in address bar ...

📅 2021-06-11
CVSS 6.5 Dossier →
Component: internet

Improper component protection vulnerability in Samsung Internet prior to version 14.0.1.62 allows untrusted applications to execute arbitrary activity...

📅 2021-06-11
CVSS 7.8 Dossier →
Page 50 of 62 (1,475 Total Records)