Vulnerabilities (CVE)

Filtered by vendor Samsung Subscribe
Total 1089 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-25524 1 Samsung 1 Contacts 2024-11-21 2.1 LOW 4.0 MEDIUM
Insecure storage of device information in Contacts prior to version 12.7.05.24 allows attacker to get Samsung Account ID.
CVE-2021-25523 1 Samsung 1 Dialer 2024-11-21 2.1 LOW 4.0 MEDIUM
Insecure storage of device information in Samsung Dialer prior to version 12.7.05.24 allows attacker to get Samsung Account ID.
CVE-2021-25522 1 Samsung 1 Smart Capture 2024-11-21 2.1 LOW 5.3 MEDIUM
Insecure storage of sensitive information vulnerability in Smart Capture prior to version 4.8.02.10 allows attacker to access victim's captured images without permission.
CVE-2021-25521 1 Samsung 1 Internet 2024-11-21 2.1 LOW 4.0 MEDIUM
Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get current tab URL in Samsung Internet.
CVE-2021-25520 1 Samsung 1 Internet 2024-11-21 4.3 MEDIUM 5.9 MEDIUM
Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to execute script codes in Samsung Internet.
CVE-2021-25509 1 Samsung 1 Samsung Flow 2024-11-21 3.6 LOW 5.9 MEDIUM
A missing input validation in Samsung Flow Windows application prior to Version 4.8.5.0 allows attackers to overwrite abtraty file in the Windows known folders.
CVE-2021-25508 1 Samsung 1 Smartthings 2024-11-21 7.5 HIGH 5.3 MEDIUM
Improper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22 allows an attacker to abuse the API key without limitation.
CVE-2021-25507 1 Samsung 1 Samsung Flow 2024-11-21 2.7 LOW 5.7 MEDIUM
Improper authorization vulnerability in Samsung Flow mobile application prior to 4.8.03.5 allows Samsung Flow PC application connected with user device to access part of notification data in Secure Folder without authorization.
CVE-2021-25506 1 Samsung 1 Health 2024-11-21 2.1 LOW 4.0 MEDIUM
Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider or lead to denial of service.
CVE-2021-25505 1 Samsung 1 Samsung Pass 2024-11-21 6.8 MEDIUM 3.3 LOW
Improper authentication in Samsung Pass prior to 3.0.02.4 allows to use app without authentication when lockscreen is unlocked.
CVE-2021-25504 1 Samsung 1 Group Sharing 2024-11-21 2.1 LOW 4.0 MEDIUM
Intent redirection vulnerability in Group Sharing prior to 10.8.03.2 allows attacker to access contact information.
CVE-2021-25503 2 Google, Samsung 2 Android, Exynos 2024-11-21 4.6 MEDIUM 5.0 MEDIUM
Improper input validation vulnerability in HDCP prior to SMR Nov-2021 Release 1 allows attackers to arbitrary code execution.
CVE-2021-25500 2 Google, Samsung 5 Android, Exynos 2100, Exynos 980 and 2 more 2024-11-21 2.1 LOW 7.2 HIGH
A missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 allows attackers to overwrite TZASC allowing TEE compromise.
CVE-2021-25499 1 Samsung 1 Galaxy Store 2024-11-21 2.1 LOW 7.1 HIGH
Intent redirection vulnerability in SamsungAccountSDKSigninActivity of Galaxy Store prior to version 4.5.32.4 allows attacker to access content provider of Galaxy Store.
CVE-2021-25498 1 Samsung 1 Notes 2024-11-21 4.6 MEDIUM 7.3 HIGH
A possible buffer overflow vulnerability in maetd_eco_cb_mode of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows arbitrary code execution.
CVE-2021-25497 1 Samsung 1 Notes 2024-11-21 4.6 MEDIUM 7.3 HIGH
A possible buffer overflow vulnerability in maetd_cpy_slice of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows arbitrary code execution.
CVE-2021-25496 1 Samsung 1 Notes 2024-11-21 4.6 MEDIUM 7.3 HIGH
A possible buffer overflow vulnerability in maetd_dec_slice of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows arbitrary code execution.
CVE-2021-25495 1 Samsung 1 Notes 2024-11-21 4.6 MEDIUM 7.3 HIGH
A possible heap buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code execution.
CVE-2021-25494 1 Samsung 1 Notes 2024-11-21 4.6 MEDIUM 4.0 MEDIUM
A possible buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code execution.
CVE-2021-25493 1 Samsung 1 Notes 2024-11-21 3.6 LOW 4.0 MEDIUM
Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read