Vulnerabilities (CVE)

Filtered by vendor Samsung Subscribe
Total 1089 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-25821 2 Google, Samsung 2 Android, Exynos 2024-11-21 3.6 LOW 3.3 LOW
Improper use of SMS buffer pointer in Shannon baseband prior to SMR Mar-2022 Release 1 allows OOB read.
CVE-2022-25819 2 Google, Samsung 2 Android, Exynos 2024-11-21 2.1 LOW 5.3 MEDIUM
OOB read vulnerability in hdcp2 device node prior to SMR Mar-2022 Release 1 allow an attacker to view Kernel stack memory.
CVE-2022-25154 1 Samsung 2 T5, T5 Firmware 2024-11-21 4.4 MEDIUM 7.3 HIGH
A DLL hijacking vulnerability in Samsung portable SSD T5 PC software before 1.6.9 could allow a local attacker to escalate privileges. (An attacker must already have user privileges on Windows 7, 10, or 11 to exploit this vulnerability.)
CVE-2022-24932 2 Google, Samsung 2 Android, Cloud 2024-11-21 2.1 LOW 4.2 MEDIUM
Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard.
CVE-2022-24930 1 Samsung 1 Wear Os 2024-11-21 4.3 MEDIUM 4.4 MEDIUM
An Improper access control vulnerability in StRetailModeReceiver in Wear OS 3.0 prior to Firmware update MAR-2022 Release allows untrusted applications to reset default app settings without a proper permission
CVE-2022-24927 1 Samsung 1 Video Player 2024-11-21 7.5 HIGH 4.2 MEDIUM
Improper privilege management vulnerability in Samsung Video Player prior to version 7.3.15.30 allows attackers to execute video files without permission.
CVE-2022-24926 1 Samsung 1 Smarttagplugin 2024-11-21 3.5 LOW 5.7 MEDIUM
Improper input validation vulnerability in SmartTagPlugin prior to version 1.2.15-6 allows privileged attackers to trigger a XSS on a victim's devices.
CVE-2022-24924 1 Samsung 1 Livewallpaperservice 2024-11-21 5.0 MEDIUM 2.2 LOW
An improper access control in LiveWallpaperService prior to versions 3.0.9.0 allows to create a specific named system directory without a proper permission.
CVE-2022-24923 1 Samsung 1 Searchwidget 2024-11-21 2.1 LOW 4.0 MEDIUM
Improper access control vulnerability in Samsung SearchWidget prior to versions 2.3.00.6 in China models allows untrusted applications to load arbitrary URL and local files in webview.
CVE-2022-24003 1 Samsung 1 Bixby Vision 2024-11-21 5.0 MEDIUM 4.0 MEDIUM
Exposure of Sensitive Information vulnerability in Bixby Vision prior to version 3.7.50.6 allows attackers to access internal data of Bixby Vision via unprotected intent.
CVE-2022-24002 1 Samsung 1 Link Sharing 2024-11-21 5.0 MEDIUM 4.0 MEDIUM
Improper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activity via PreconditionActivity.
CVE-2022-23998 2 Google, Samsung 2 Android, Camera 2024-11-21 4.3 MEDIUM 6.2 MEDIUM
Improper access control vulnerability in Camera prior to versions 11.1.02.16 in Android R(11), 10.5.03.77 in Android Q(10) and 9.0.6.68 in Android P(9) allows untrusted applications to take a picture in screenlock status.
CVE-2022-23997 1 Samsung 1 Wear Os 2024-11-21 4.3 MEDIUM 4.0 MEDIUM
Unprotected component vulnerability in StTheaterModeDurationAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to disable theater mode without a proper permission.
CVE-2022-23996 1 Samsung 1 Wear Os 2024-11-21 4.3 MEDIUM 4.0 MEDIUM
Unprotected component vulnerability in StTheaterModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to enable bedtime mode without a proper permission.
CVE-2022-23995 1 Samsung 1 Wear Os 2024-11-21 4.3 MEDIUM 4.0 MEDIUM
Unprotected component vulnerability in StBedtimeModeAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission.
CVE-2022-23994 1 Samsung 1 Wear Os 2024-11-21 4.3 MEDIUM 3.3 LOW
An Improper access control vulnerability in StBedtimeModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission.
CVE-2022-23434 2 Google, Samsung 2 Android, Bixby 2024-11-21 2.1 LOW 4.4 MEDIUM
A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below allows attackers to execute privileged action by hijacking and modifying the intent.
CVE-2022-23433 2 Google, Samsung 2 Android, Reminder 2024-11-21 5.0 MEDIUM 4.3 MEDIUM
Improper access control vulnerability in Reminder prior to versions 12.3.01.3000 in Android S(12), 12.2.05.6000 in Android R(11) and 11.6.08.6000 in Andoid Q(10) allows attackers to register reminders or execute exporeted activities remotely.
CVE-2022-23432 2 Google, Samsung 2 Android, Exynos 2024-11-21 4.6 MEDIUM 6.4 MEDIUM
An improper input validation in SMC_SRPMB_WSM handler of RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.
CVE-2022-23431 2 Google, Samsung 2 Android, Exynos 2024-11-21 4.6 MEDIUM 6.4 MEDIUM
An improper boundary check in RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.