Samsung
samsung
1,550 CVEs • 2,868 products
Products (2,868)
Click to collapseToggle
Products (2,868)
Click to collapse
CVEs (1,550)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Error in 3GPP specification implementation in Exynos baseband prior to SMR Apr-2023 Release 1 allows incorrect handling of unencrypted message. |
PendingIntent hijacking vulnerability in CertificatePolicy in framework prior to SMR Apr-2023 Release 1 allows local attackers to access contentProvider without proper permission. |
1Samsung 19Exynos 1080 Firmware Exynos 1280 FirmwareExynos 1330 Firmware+16 moreJun 17, 2026 Sep 2, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 54...Show more |
An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows. An attacker can achieve Elevation of Privileges to SYSTEM by exploiting insecure file delete operations during the update process. |
Improper access control in Galaxy Wearable prior to version 2.2.63.25042861 allows local attackers to access sensitive information. |
Out-of-bounds write in drawing pinpad in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-of-bounds memory. |
Out-of-bounds write in creating bitmap images in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-of-bounds memory. |
Improper authorization in Samsung Health prior to version 6.30.1.003 allows local attackers to access data in Samsung Health. User interaction is required for triggering this vulnerability. |
Out-of-bounds read in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to read out-of-bounds memory. |
Out-of-bounds write in detaching crypto box in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-of-bounds memory. |
Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document scanner's privilege. |
Improper export of android application component in Emergency SoS prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information. |
Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to deactivate Samsung account. |
Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access device identifier. |
1Samsung 7Exynos 1280 Firmware Exynos 1330 FirmwareExynos 1380 Firmware+4 moreJun 17, 2026 Aug 4, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An issue was discovered in Samsung Mobile Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480, and 2400. A lack of a JPEG length check leads to an out-of-bound write. |
1Samsung 1Data Management Server Firmware Jun 17, 2026 Jul 29, 2025 N/A· v4 9.1 CRITICAL· v3 N/A· v2 An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP ad...Show more |
1Samsung 1Data Management Server Firmware Jun 17, 2026 Jul 29, 2025 N/A· v4 9.1 CRITICAL· v3 N/A· v2 An 'Arbitrary File Creation' in Samsung DMS(Data Management Server) allows attackers to create arbitrary files in unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addr...Show more |
1Samsung 1Data Management Server Firmware Jun 17, 2026 Jul 29, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Samsung DMS(Data Management Server) allows authenticated attackers to create arbitrary files in unintended locations on the filesystem |
1Samsung 1Data Management Server Firmware Jun 17, 2026 Jul 29, 2025 N/A· v4 4.9 MEDIUM· v3 N/A· v2 Absolute Path Traversal in Samsung DMS(Data Management Server) allows authenticated attacker (Administrator) to read sensitive files |
1Samsung 1Data Management Server Firmware Jun 17, 2026 Jul 29, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Deserialization of Untrusted Data in Samsung DMS(Data Management Server) allows attackers to execute arbitrary code via write file to system |