Samsung

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-8780 1Samsung 1Kies May 13, 2026 Apr 13, 2017 N/A· v4 6.4 MEDIUM· v3 6.9 MEDIUM· v2 Samsung wssyncmlnps before 2015-10-31 allows directory traversal in a Kies restore, aka ZipFury.
CVE-2015-7893 1Samsung 1Galaxy S6 May 13, 2026 Apr 11, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to execute arbitrary JavaScript.
CVE-2015-0864 1Samsung 2Galaxy App Samsung Account App May 13, 2026 Mar 27, 2017 N/A· v4 8.0 HIGH· v3 7.9 HIGH· v2 Samsung Account (AKA com.osp.app.signin) before 1.6.0069 and 2.x before 2.1.0069 allows man-in-the-middle attackers to obtain sensitive information and execute arbitrary code.
CVE-2015-0863 1Samsung 2Galaxy App Samsung Account App May 13, 2026 Mar 27, 2017 N/A· v4 8.0 HIGH· v3 7.9 HIGH· v2 GALAXY Apps (aka Samsung Apps, Samsung Updates, or com.sec.android.app.samsungapps) before 14120405.03.012 allows man-in-the-middle attackers to obtain sensitive information and execute arbitrary code.
CVE-2015-5729 1Samsung 6M288ofw Firmware Nt14u FirmwareX10p Firmware+3 more May 13, 2026 Mar 23, 2017 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain sensitive information...Show more The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain sensitive information or bypass authentication via a brute-force attack.Show less
CVE-2017-5538 1Samsung 1Samsung Mobile May 13, 2026 Mar 23, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The kbase_dispatch function in arm/t7xx/r5p0/mali_kbase_core_linux.c in the GPU driver on Samsung devices with M(6.0) and N(7.0) software and Exynos AP chipsets allows attackers to have unspecified impact via unknown vec...Show more The kbase_dispatch function in arm/t7xx/r5p0/mali_kbase_core_linux.c in the GPU driver on Samsung devices with M(6.0) and N(7.0) software and Exynos AP chipsets allows attackers to have unspecified impact via unknown vectors, which trigger an out-of-bounds read, aka SVE-2016-6362.Show less
CVE-2017-5927 5Allwinner AmdIntel+2 more 20A64 Athlon Ii 640 X4Atom C2750+17 more May 13, 2026 Feb 27, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern ARM processors. By performing a side-channel attack on the MMU operations, it is possib...Show more Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern ARM processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR.Show less
CVE-2017-5926 5Allwinner AmdIntel+2 more 20A64 Athlon Ii 640 X4Atom C2750+17 more May 13, 2026 Feb 27, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern AMD processors. By performing a side-channel attack on the MMU operations, it is possib...Show more Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern AMD processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR.Show less
CVE-2017-5925 5Allwinner AmdIntel+2 more 20A64 Athlon Ii 640 X4Atom C2750+17 more May 13, 2026 Feb 27, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern Intel processors. By performing a side-channel attack on the MMU operations, it is poss...Show more Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern Intel processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR.Show less
CVE-2016-4547 1Samsung 1Samsung Mobile May 13, 2026 Feb 13, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Samsung devices with Android KK(4.4), L(5.0/5.1), or M(6.0) allow attackers to cause a denial of service (system crash) via a crafted system call to TvoutService_C.
CVE-2016-4546 1Samsung 1Samsung Mobile May 13, 2026 Feb 13, 2017 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Samsung devices with Android KK(4.4) or L(5.0/5.1) allow local users to cause a denial of service (IAndroidShm service crash) via crafted data in a service call.
CVE-2016-4038 1Samsung 1Samsung Mobile May 13, 2026 Feb 1, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Array index error in the msm_sensor_config function in kernel/SM-G9008V_CHN_KK_Opensource/Kernel/drivers/media/platform/msm/camera_v2/sensor/msm_sensor.c in Samsung devices with Android KK(4.4) or L and an APQ8084, MSM89...Show more Array index error in the msm_sensor_config function in kernel/SM-G9008V_CHN_KK_Opensource/Kernel/drivers/media/platform/msm/camera_v2/sensor/msm_sensor.c in Samsung devices with Android KK(4.4) or L and an APQ8084, MSM8974, or MSM8974pro chipset allows local users to have unspecified impact via the gpio_config.gpio_name value.Show less
CVE-2016-6604 1Samsung 1Exynos Fimg2d May 13, 2026 Jan 30, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 NULL pointer dereference in Samsung Exynos fimg2d driver for Android L(5.0/5.1) and M(6.0) allows attackers to have unspecified impact via unknown vectors. The Samsung ID is SVE-2016-6382.
CVE-2016-3996 1Samsung 1Knox May 13, 2026 Jan 27, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 ClipboardDataMgr in Samsung KNOX 1.0.0 and 2.3.0 does not properly check the caller, which allows local users to read KNOX clipboard data via a crafted application.
CVE-2016-1920 1Samsung 1Knox May 13, 2026 Jan 27, 2017 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Samsung KNOX 1.0.0 uses the shared certificate on Android, which allows local users to conduct man-in-the-middle attacks as demonstrated by installing a certificate and running a VPN service.
CVE-2016-1919 1Samsung 1Knox May 13, 2026 Jan 27, 2017 N/A· v4 4.7 MEDIUM· v3 1.9 LOW· v2 Samsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for local users to obtain sensitive information by leveraging knowledge of the TIMA key and a brute-force attack.
CVE-2016-9279 1Samsung 1Exynos Fimg2d Driver May 13, 2026 Jan 18, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Use-after-free vulnerability in the Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 chipsets allows attackers to obtain sensitive information via unspecified vectors. The Samsung ID is SVE-2016-6...Show more Use-after-free vulnerability in the Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 chipsets allows attackers to obtain sensitive information via unspecified vectors. The Samsung ID is SVE-2016-6853.Show less
CVE-2016-9278 1Samsung 1Exynos Fimg2d Driver May 13, 2026 Jan 18, 2017 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 The Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 chipsets allows local users to cause a denial of service (kernel panic) via a crafted ioctl command. The Samsung ID is SVE-2016-6736.
CVE-2016-6527 1Samsung 1Samsung Mobile May 13, 2026 Jan 18, 2017 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 The SmartCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6.0) allows attackers to cause a denial of service (crash and reboot) or possibly gain privileges via a malformed serializab...Show more The SmartCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6.0) allows attackers to cause a denial of service (crash and reboot) or possibly gain privileges via a malformed serializable object.Show less
CVE-2016-6526 1Samsung 1Samsung Mobile May 13, 2026 Jan 18, 2017 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 The SpamCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6.0) allows attackers to cause a denial of service (crash and reboot) or possibly gain privileges via a malformed serializabl...Show more The SpamCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6.0) allows attackers to cause a denial of service (crash and reboot) or possibly gain privileges via a malformed serializable object.Show less

Previous 1...727374...78 Next