← Back

Samsung

samsung

1,527 CVEs • 2,868 products

Products (2,868)

Click to collapse
Toggle
Android
android
Notes
notes
X14j Firmware
x14j_firmware
Galaxy Store
galaxy_store
Internet
internet
Account
account
Escargot
escargot
Wear Os
wear_os
Smartthings
smartthings
Members
members
Mtower
mtower
Smart Switch
smart_switch
Kies
kies
Health
health
Pass
pass
Email
email
Magician
magician
Cloud
cloud
Gallery
gallery
One
one
Camera
camera
Flow
flow
Samsung Email
samsung_email
Tizenrt
tizenrt
Group Sharing
group_sharing
Samsung Pass
samsung_pass
Quick Share
quick_share
Calendar
calendar
Net I Viewer
net-i_viewer
Smartviewer
smartviewer
Knox
knox
Galaxy Apps
galaxy_apps
Exynos
exynos
Samsung Flow
samsung_flow
Samsung Pay
samsung_pay
Myfiles
myfiles
Sassistant
sassistant
Assistant
assistant
Rlottie
rlottie
Smart Viewer
smart_viewer

CVEs (1,527)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Samsung
1Themes
Jun 17, 2026
Sep 9, 2021
N/A· v4
7.0 HIGH· v3
4.4 MEDIUM· v2
An improper scheme check vulnerability in Samsung Themes prior to version 5.2.01 allows attackers to perform Man-in-the-middle attack.
1Samsung
1Capture
Jun 17, 2026
Sep 9, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
An improper file management vulnerability in SamsungCapture prior to version 4.8.02 allows sensitive information leak.
1Samsung
1Penup
Jun 17, 2026
Sep 9, 2021
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
Improper access control vulnerability in PENUP prior to version 3.8.00.18 allows arbitrary webpage loading in webview.
1Samsung
1Drive Manager
Jun 17, 2026
Sep 1, 2021
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Samsung Drive Manager 2.0.104 on Samsung H3 devices allows attackers to bypass intended access controls on disk management. WideCharToMultiByte, WideCharStr, and MultiByteStr can contribute to password exposure.
1Samsung
1Tizenrt
Jun 17, 2026
Aug 31, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functions_calloc and mm_zalloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a cr...Show more
Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functions_calloc and mm_zalloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crashShow less
1Samsung
1Smart Touch Call
Jun 17, 2026
Aug 5, 2021
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in webview.
1Samsung
1Smartthings Firmware
Jun 17, 2026
Aug 5, 2021
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause local file inclusion in webview.
1Samsung
1Smartthings Firmware
Jun 17, 2026
Aug 5, 2021
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview.
1Samsung
1Internet
Jun 17, 2026
Aug 5, 2021
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Unprotected component vulnerability in Samsung Internet prior to version 14.2 allows untrusted application to access internal files in Samsung Internet.
1Samsung
1Knox Cloud Services
Jun 17, 2026
Jul 8, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Improper MDM policy management vulnerability in KME module prior to KCS version 1.39 allows MDM users to bypass Knox Manage authentication.
1Samsung
1Ar Emoji Editor
Jun 17, 2026
Jul 8, 2021
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Improper input validation vulnerability in AR Emoji Editor prior to version 4.4.03.5 in Android Q(10.0) and above allows untrusted applications to access arbitrary files with an escalated privilege.
1Samsung
1Factorycamerafb
Jun 17, 2026
Jul 8, 2021
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Improper access control vulnerability in FactoryCameraFB prior to version 3.4.74 allows untrusted applications to access arbitrary files with an escalated privilege.
1Samsung
1Members
Jun 17, 2026
Jul 8, 2021
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to cause arbitrary webpage loading...Show more
Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to cause arbitrary webpage loading in webview.Show less
1Samsung
1Members
Jun 17, 2026
Jul 8, 2021
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to cause local file inclusion in w...Show more
Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to cause local file inclusion in webview.Show less
1Samsung
1Samsung Members
Jun 17, 2026
Jul 8, 2021
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
Information exposure vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to access chat data.
1Samsung
1Cameralyzer
Jun 17, 2026
Jul 8, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Improper access control vulnerability in Cameralyzer prior to versions 3.2.1041 in 3.2.x, 3.3.1040 in 3.3.x, and 3.4.4210 in 3.4.x allows untrusted applications to access some functions of Cameralyzer.
1Samsung
1Health
Jun 17, 2026
Jun 11, 2021
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to read internal cache data via exported component.
1Samsung
9Galaxy Watch 3 Firmware
Galaxy Watch Active 2 FirmwareGalaxy Watch Active Firmware+6 more
Jun 17, 2026
Jun 11, 2021
N/A· v4
8.8 HIGH· v3
5.8 MEDIUM· v2
Improper authentication vulnerability in Tizen bluetooth-frwk prior to Firmware update JUN-2021 Release allows bluetooth attacker to take over the user's bluetooth device without user awareness.
1Samsung
1Watch Active2 Plugin
Jun 17, 2026
Jun 11, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone via log.
1Samsung
1Watch Active Plugin
Jun 17, 2026
Jun 11, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Improper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log.