← Back

Samsung

samsung

1,527 CVEs • 2,868 products

Products (2,868)

Click to collapse
Toggle
Android
android
Notes
notes
X14j Firmware
x14j_firmware
Galaxy Store
galaxy_store
Internet
internet
Account
account
Escargot
escargot
Wear Os
wear_os
Smartthings
smartthings
Members
members
Mtower
mtower
Smart Switch
smart_switch
Kies
kies
Health
health
Pass
pass
Email
email
Magician
magician
Cloud
cloud
Gallery
gallery
One
one
Camera
camera
Flow
flow
Samsung Email
samsung_email
Tizenrt
tizenrt
Group Sharing
group_sharing
Samsung Pass
samsung_pass
Quick Share
quick_share
Calendar
calendar
Net I Viewer
net-i_viewer
Smartviewer
smartviewer
Knox
knox
Galaxy Apps
galaxy_apps
Exynos
exynos
Samsung Flow
samsung_flow
Samsung Pay
samsung_pay
Myfiles
myfiles
Sassistant
sassistant
Assistant
assistant
Rlottie
rlottie
Smart Viewer
smart_viewer

CVEs (1,527)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Samsung
1Android
Jun 17, 2026
Sep 3, 2025
N/A· v4
4.4 MEDIUM· v3
N/A· v2
Improper access control in MARsExemptionManager prior to SMR Sep-2025 Release 1 allows local attackers to be excluded from background execution management.
1Samsung
1Galaxy Store
Jun 17, 2026
Sep 3, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service.
1Samsung
1Camera
Jun 17, 2026
Sep 3, 2025
N/A· v4
4.6 MEDIUM· v3
N/A· v2
Missing authorization vulnerability in Camera prior to versions 11.1.02.18 in Android 11, 12.1.03.8 in Android 12 and 13.1.01.4 in Android 13 allows physical attackers to install package through Galaxy store before comp...Show more
Missing authorization vulnerability in Camera prior to versions 11.1.02.18 in Android 11, 12.1.03.8 in Android 12 and 13.1.01.4 in Android 13 allows physical attackers to install package through Galaxy store before completion of Setup wizard.Show less
1Samsung
1Account
Jun 17, 2026
Sep 3, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Improper URL input validation vulnerability in Samsung Account application prior to version 14.1.0.0 allows remote attackers to get sensitive information.
1Samsung
1Android
Jun 17, 2026
Sep 3, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper input validation vulnerability in CertByte prior to SMR Apr-2023 Release 1 allows local attackers to launch privileged activities.
1Samsung
2Android
Smart Suggestions
Jun 17, 2026
Sep 3, 2025
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Improper authorization in Smart suggestions prior to SMR Apr-2023 Release 1 in Android 13 and 4.1.01.0 in Android 12 allows remote attackers to register a schedule.
1Samsung
1Android
Jun 17, 2026
Sep 3, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Improper input validation vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data.
1Samsung
1Android
Jun 17, 2026
Sep 3, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Access of Memory Location After End of Buffer vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data.
1Samsung
1Android
Jun 17, 2026
Sep 3, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds Write vulnerability in libaudiosaplus_sec.so library prior to SMR Apr-2023 Release 1 allows local attacker to execute arbitrary code.
1Samsung
1Android
Jun 17, 2026
Sep 3, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds Write vulnerability in libaudiosaplus_sec.so library prior to SMR Apr-2023 Release 1 allows local attacker to execute arbitrary code.
1Samsung
1Android
Jun 17, 2026
Sep 3, 2025
N/A· v4
7.1 HIGH· v3
N/A· v2
Intent redirection vulnerability in SecSettings prior to SMR Apr-2022 Release 1 allows attackers to access arbitrary file with system privilege.
1Samsung
1Android
Jun 17, 2026
Sep 3, 2025
N/A· v4
6.8 MEDIUM· v3
N/A· v2
Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader.
1Samsung
1Android
Jun 17, 2026
Sep 3, 2025
N/A· v4
6.8 MEDIUM· v3
N/A· v2
Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader.
1Samsung
1Android
Jun 17, 2026
Sep 3, 2025
N/A· v4
3.3 LOW· v3
N/A· v2
Improper access control vulnerability in SemClipboard prior to SMR Apr-2023 Release 1 allows attackers to read arbitrary files with system permission.
1Samsung
1Android
Jun 17, 2026
Sep 3, 2025
N/A· v4
3.3 LOW· v3
N/A· v2
Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information using com.samsung.android.wifi.NETWORK_LOCATION action.
1Samsung
1Android
Jun 17, 2026
Sep 3, 2025
N/A· v4
3.3 LOW· v3
N/A· v2
Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information using com.samsung.android.wifi.GEOFENCE action.
1Samsung
1Android
Jun 17, 2026
Sep 3, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper access control vulnerability in Telephony prior to SMR Apr-2023 Release 1 allows attackers to access files with escalated permission.
1Samsung
1Exynos
Jun 17, 2026
Sep 3, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Error in 3GPP specification implementation in Exynos baseband prior to SMR Apr-2023 Release 1 allows incorrect handling of unencrypted message.
1Samsung
1Android
Jun 17, 2026
Sep 3, 2025
N/A· v4
3.3 LOW· v3
N/A· v2
PendingIntent hijacking vulnerability in CertificatePolicy in framework prior to SMR Apr-2023 Release 1 allows local attackers to access contentProvider without proper permission.
1Samsung
19Exynos 1080 Firmware
Exynos 1280 FirmwareExynos 1330 Firmware+16 more
Jun 17, 2026
Sep 2, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 54...Show more
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. A programming mistake for buffer copy leads to out-of-bounds writes via malformed ROHC packets.Show less