← Back

Samsung

samsung

1,550 CVEs • 2,868 products

Products (2,868)

Click to collapse
Toggle
Android
android
Notes
notes
X14j Firmware
x14j_firmware
Galaxy Store
galaxy_store
Internet
internet
Account
account
Escargot
escargot
Wear Os
wear_os
Smartthings
smartthings
Smart Switch
smart_switch
Members
members
Health
health
Mtower
mtower
Kies
kies
Pass
pass
Email
email
Magician
magician
Cloud
cloud
Gallery
gallery
One
one
Camera
camera
Flow
flow
Samsung Email
samsung_email
Tizenrt
tizenrt
Group Sharing
group_sharing
Samsung Pass
samsung_pass
Quick Share
quick_share
Calendar
calendar
Net I Viewer
net-i_viewer
Smartviewer
smartviewer
Knox
knox
Galaxy Apps
galaxy_apps
Exynos
exynos
Samsung Flow
samsung_flow
Samsung Pay
samsung_pay
Myfiles
myfiles
Sassistant
sassistant
Assistant
assistant
Rlottie
rlottie
Smart Viewer
smart_viewer

CVEs (1,550)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Samsung
1Android
Jun 17, 2026
Feb 9, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Improper access control vulnerability in NfcTile prior to SMR Jan-2023 Release 1 allows to attacker to use NFC without user recognition.
1Samsung
1Android
Jun 17, 2026
Feb 9, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Hardcoded AES key to encrypt cardemulation PINs in NFC prior to SMR Jan-2023 Release 1 allows attackers to access cardemulation PIN.
1Samsung
1Android
Jun 17, 2026
Feb 9, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Improper access control vulnerability in telecom application prior to SMR JAN-2023 Release 1 allows local attackers to get sensitive information.
1Samsung
1Android
Jun 17, 2026
Feb 9, 2023
N/A· v4
3.3 LOW· v3
N/A· v2
Improper Handling of Insufficient Permissions or Privileges vulnerability in SemChameleonHelper prior to SMR Jan-2023 Release 1 allows attacker to modify network related values, network code, carrier id and operator bran...Show more
Improper Handling of Insufficient Permissions or Privileges vulnerability in SemChameleonHelper prior to SMR Jan-2023 Release 1 allows attacker to modify network related values, network code, carrier id and operator brand.Show less
1Samsung
1Android
Jun 17, 2026
Feb 9, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Improper authorization vulnerability in ChnFileShareKit prior to SMR Jan-2023 Release 1 allows attacker to control BLE advertising without permission using unprotected action.
1Samsung
1Android
Jun 17, 2026
Feb 9, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Improper authorization vulnerability in semAddPublicDnsAddr in WifiSevice prior to SMR Jan-2023 Release 1 allows attackers to set custom DNS server without permission via binding WifiService.
1Samsung
1Android
Jun 17, 2026
Feb 9, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper Handling of Insufficient Permissions or Privileges vulnerability in KnoxCustomManagerService prior to SMR Jan-2023 Release 1 allows attacker to access device SIM PIN.
1Samsung
1Android
Jun 17, 2026
Feb 9, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Use of Externally-Controlled Format String vulnerabilities in STST TA prior to SMR Jan-2023 Release 1 allows arbitrary code execution.
1Samsung
15T Ksu2eakuc Firmware
T Ksu2edeuc FirmwareT Ksu2euab Firmware+12 more
Jun 17, 2026
Dec 13, 2022
N/A· v4
4.6 MEDIUM· v3
N/A· v2
The Samsung TV (2021 and 2022 model) smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote control by pressing a button. This is fixed in xxx72510, E917...Show more
The Samsung TV (2021 and 2022 model) smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote control by pressing a button. This is fixed in xxx72510, E9172511 for 2021 models, xxxA1000, 4x2A0200 for 2022 models.Show less
1Samsung
1Calendar
Jun 17, 2026
Dec 8, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Improper access control vulnerability in Calendar prior to versions 11.6.08.0 in Android Q(10), 12.2.11.3000 in Android R(11), 12.3.07.2000 in Android S(12), and 12.4.02.0 in Android T(13) allows attackers to access sens...Show more
Improper access control vulnerability in Calendar prior to versions 11.6.08.0 in Android Q(10), 12.2.11.3000 in Android R(11), 12.3.07.2000 in Android S(12), and 12.4.02.0 in Android T(13) allows attackers to access sensitive information via implicit intent.Show less
1Samsung
1Pass
Jun 17, 2026
Dec 8, 2022
N/A· v4
6.8 MEDIUM· v3
N/A· v2
Improper check or handling of exceptional conditions vulnerability in Samsung Pass prior to version 4.0.06.1 allows attacker to access Samsung Pass.
1Samsung
1Pass
Jun 17, 2026
Dec 8, 2022
N/A· v4
4.2 MEDIUM· v3
N/A· v2
Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data of Samsung Pass on a certain state of an unlocked device using pop-up view.
1Samsung
1Gear Iconx Pc Manager
Jun 17, 2026
Dec 8, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Insufficient verification of data authenticity vulnerability in Samsung Gear IconX PC Manager prior to version 2.1.221019.51 allows local attackers to create arbitrary file using symbolic link.
1Samsung
1Exynos Firmware
Jun 17, 2026
Dec 8, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call.
1Samsung
1Exynos Firmware
Jun 17, 2026
Dec 8, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption between UE and gNodeB.
1Samsung
1Galaxy Buds Pro Manage
Jun 17, 2026
Nov 9, 2022
N/A· v4
3.3 LOW· v3
N/A· v2
Sensitive information exposure vulnerability in FmmBaseModel in Galaxy Buds Pro Manage prior to version 4.1.22092751 allows local attackers with log access permission to get device identifier data through device log.
1Samsung
1Pass
Jun 17, 2026
Nov 9, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature.
1Samsung
1Editor Lite
Jun 17, 2026
Nov 9, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
Heap overflow vulnerability in parse_pce function in libsavsaudio.so in Editor Lite prior to version 4.0.41.3 allows attacker to get information.
1Samsung
1Billing
Jun 17, 2026
Nov 9, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
Improper Authorization in Samsung Billing prior to version 5.0.56.0 allows attacker to get sensitive information.
1Samsung
1Galaxywatch4plugin
Jun 17, 2026
Nov 9, 2022
N/A· v4
3.3 LOW· v3
N/A· v2
Improper access control vulnerability in GalaxyWatch4Plugin prior to versions 2.2.11.22101351 and 2.2.12.22101351 allows attackers to access wearable device information.