Notes

notes

Vendor: Samsung • 63 CVEs

CVEs (63)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-25367 1Samsung 1Notes Jun 17, 2026 Mar 25, 2021 N/A· v4 5.4 MEDIUM· v3 5.5 MEDIUM· v2 Path Traversal vulnerability in Samsung Notes prior to version 4.2.00.22 allows attackers to access local files without permission.
CVE-2021-25355 1Samsung 1Notes Jun 17, 2026 Mar 25, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Using unsafe PendingIntent in Samsung Notes prior to version 4.2.00.22 allows local attackers unauthorized action without permission via hijacking the PendingIntent.
CVE-2018-10501 1Samsung 1Notes Nov 21, 2024 Sep 24, 2018 N/A· v4 7.0 HIGH· v3 4.4 MEDIUM· v2 This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Notes Fixed in version 2.0.02.31. An attacker must first obtain the ability to execute low-privileged code on the ta...Show more This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Notes Fixed in version 2.0.02.31. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of ZIP files. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the application. Was ZDI-CAN-5358.Show less