samsung Vulnerability Advisory Catalog

Total 1,475 security vulnerabilities recorded for samsung software and firmware.

← Back to All Vendors
Component: gear_s

Information exposure vulnerability in Gear S Plugin prior to version 2.2.05.20122441 allows unstrusted applications to access connected BT device info...

📅 2021-06-11
CVSS 6.5 Dossier →
Component: notes

An improper access control vulnerability in ScreenOffActivity in Samsung Notes prior to version 4.2.04.27 allows untrusted applications to access loca...

📅 2021-06-11
CVSS 5.5 Dossier →
Component: smartthings_firmware

Information Exposure vulnerability in SmartThings prior to version 1.7.64.21 allows attacker to access user information via log....

📅 2021-06-11
CVSS 3.3 Dossier →
Component: account

Intent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P(9.0) and below, and 12.2.0.9 in Android Q(10.0) and above a...

📅 2021-06-11
CVSS 3.3 Dossier →
Component: notes

Information Exposure vulnerability in Samsung Notes prior to version 4.2.04.27 allows attacker to access s pen latency information....

📅 2021-06-11
CVSS 3.3 Dossier →
Component: health

Intent redirection vulnerability in Samsung Health prior to version 6.16 allows attacker to execute privileged action....

📅 2021-06-11
CVSS 7.8 Dossier →
Component: internet

Intent redirection vulnerability in Samsung Internet prior to version 14.0.1.20 allows attacker to execute privileged action....

📅 2021-06-11
CVSS 7.8 Dossier →
Component: smart_manager

Improper configuration in Smart Manager prior to version 11.0.05.0 allows attacker to access the file with system privilege....

📅 2021-06-11
CVSS 7.1 Dossier →
Component: bixby_voice

Intent redirection vulnerability in Bixby Voice prior to version 3.1.12 allows attacker to access contacts....

📅 2021-06-11
CVSS 3.3 Dossier →
Component: android

A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is com...

📅 2021-06-11
CVSS 6.4 Dossier →
Component: android

A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege...

📅 2021-06-11
CVSS 6.4 Dossier →
Component: galaxy_i9305_firmware

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fragments with non-consecutive pa...

📅 2021-05-11
CVSS 5.3 Dossier →
Component: galaxy_i9305_firmware

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast...

📅 2021-05-11
CVSS 6.5 Dossier →
Component: galaxy_i9305_firmware

An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long ...

📅 2021-05-11
CVSS 6.5 Dossier →
Component: account

Using unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P(9.0) and below, and 12.1.1.3 in Android Q(10.0) and above allows local...

📅 2021-04-09
CVSS 5.5 Dossier →
Component: bixby

Improper handling of exceptional conditions in Bixby prior to version 3.0.53.02 allows attacker to execute the actions registered by the user....

📅 2021-04-09
CVSS 5.8 Dossier →
Component: gallery

Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action....

📅 2021-04-09
CVSS 4.0 Dossier →
Component: smartthings

Improper access control of certain port in SmartThings prior to version 1.7.63.6 allows remote temporary denial of service....

📅 2021-04-09
CVSS 4.3 Dossier →
Component: experience_service

Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P(9.0) below, and 12.2.0.5 in Android Q(10.0) above allows attacker to e...

📅 2021-04-09
CVSS 3.3 Dossier →
Component: email

An improper synchronization logic in Samsung Email prior to version 6.1.41.0 can leak messages in certain mailbox in plain text when STARTTLS negotiat...

📅 2021-04-09
CVSS 3.1 Dossier →
Component: email

Using predictable index for attachments in Samsung Email prior to version 6.1.41.0 allows remote attackers to get attachments of another emails when u...

📅 2021-04-09
CVSS 6.5 Dossier →
Component: members

An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in Android O(8.1) and below, and ...

📅 2021-04-09
CVSS 8.6 Dossier →
Component: customization_service

Using unsafe PendingIntent in Customization Service prior to version 2.2.02.1 in Android O(8.x), 2.4.03.0 in Android P(9.0), 2.7.02.1 in Android Q(10....

📅 2021-04-09
CVSS 5.5 Dossier →
Component: android

An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access....

📅 2021-03-26
CVSS 6.1 Dossier →
Page 51 of 62 (1,475 Total Records)