Kies

kies

Vendor: Samsung • 11 CVEs

CVEs (11)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-39845 1Samsung 1Kies Jun 17, 2026 Sep 9, 2022 N/A· v4 7.1 HIGH· v3 N/A· v2 Improper validation of integrity check vulnerability in Samsung Kies prior to version 2.6.4.22074 allows local attackers to delete arbitrary directory using directory junction.
CVE-2022-30744 1Samsung 1Kies Jun 17, 2026 Jun 7, 2022 N/A· v4 7.8 HIGH· v3 4.4 MEDIUM· v2 DLL hijacking vulnerability in KiesWrapper in Samsung Kies prior to version 2.6.4.22043_1 allows attacker to execute arbitrary code.
CVE-2022-27843 1Samsung 1Kies Jun 17, 2026 Apr 11, 2022 N/A· v4 7.8 HIGH· v3 4.4 MEDIUM· v2 DLL hijacking vulnerability in Kies prior to version 2.6.4.22014_2 allows attacker to execute abitrary code.
CVE-2012-3810 1Samsung 1Kies Nov 21, 2024 Jan 9, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Samsung Kies before 2.5.0.12094_27_11 has registry modification.
CVE-2012-3809 1Samsung 1Kies Nov 21, 2024 Jan 9, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Samsung Kies before 2.5.0.12094_27_11 has arbitrary directory modification.
CVE-2012-3808 1Samsung 1Kies Nov 21, 2024 Jan 9, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Samsung Kies before 2.5.0.12094_27_11 has arbitrary file modification.
CVE-2012-3807 1Samsung 1Kies Nov 21, 2024 Jan 9, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Samsung Kies before 2.5.0.12094_27_11 has arbitrary file execution.
CVE-2012-3806 1Samsung 1Kies Nov 21, 2024 Jan 9, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Samsung Kies before 2.5.0.12094_27_11 contains a NULL pointer dereference vulnerability which could allow remote attackers to perform a denial of service.
CVE-2015-8780 1Samsung 1Kies May 13, 2026 Apr 13, 2017 N/A· v4 6.4 MEDIUM· v3 6.9 MEDIUM· v2 Samsung wssyncmlnps before 2015-10-31 allows directory traversal in a Kies restore, aka ZipFury.
CVE-2012-6429 1Samsung 1Kies May 6, 2026 Apr 4, 2014 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in the PrepareSync method in the SyncService.dll ActiveX control in Samsung Kies before 2.5.1.12123_2_7 allows remote attackers to execute arbitrary code via a long string to the password argument.
CVE-2012-2990 1Samsung 1Kies Apr 29, 2026 Aug 24, 2012 N/A· v4 N/A· v3 9.3 HIGH· v2 The MASetupCaller ActiveX control before 1.4.2012.508 in MASetupCaller.dll in MarkAny ContentSAFER, as distributed in Samsung KIES before 2.3.2.12074_13_13, does not properly implement unspecified methods, which allows r...Show more The MASetupCaller ActiveX control before 1.4.2012.508 in MASetupCaller.dll in MarkAny ContentSAFER, as distributed in Samsung KIES before 2.3.2.12074_13_13, does not properly implement unspecified methods, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a crafted HTML document.Show less