Vulnerabilities (CVE)

Filtered by vendor Samsung Subscribe
Total 1176 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-21497 1 Samsung 1 Android 2024-11-21 N/A 4.4 MEDIUM
Use of externally-controlled format string vulnerability in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the memory address.
CVE-2023-21496 1 Samsung 1 Android 2024-11-21 N/A 6.1 MEDIUM
Active Debug Code vulnerability in ActivityManagerService prior to SMR May-2023 Release 1 allows attacker to use debug function via setting debug level.
CVE-2023-21495 1 Samsung 1 Android 2024-11-21 N/A 4.0 MEDIUM
Improper access control vulnerability in Knox Enrollment Service prior to SMR May-2023 Release 1 allow attacker install KSP app when device admin is set.
CVE-2023-21494 1 Samsung 2 Android, Exynos 2024-11-21 N/A 5.6 MEDIUM
Potential buffer overflow vulnerability in auth api in mm_Authentication.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access.
CVE-2023-21493 1 Samsung 1 Android 2024-11-21 N/A 6.8 MEDIUM
Improper access control vulnerability in SemShareFileProvider prior to SMR May-2023 Release 1 allows local attackers to access protected data.
CVE-2023-21491 1 Samsung 1 Android 2024-11-21 N/A 8.5 HIGH
Improper access control vulnerability in ThemeManager prior to SMR May-2023 Release 1 allows local attackers to write arbitrary files with system privilege.
CVE-2023-21490 1 Samsung 1 Android 2024-11-21 N/A 4.7 MEDIUM
Improper access control in GearManagerStub prior to SMR May-2023 Release 1 allows a local attacker to delete applications installed by watchmanager.
CVE-2023-21489 1 Samsung 1 Android 2024-11-21 N/A 7.1 HIGH
Heap out-of-bounds write vulnerability in bootloader prior to SMR May-2023 Release 1 allows a physical attacker to execute arbitrary code.
CVE-2023-21488 1 Samsung 1 Android 2024-11-21 N/A 4.4 MEDIUM
Improper access control vulnerablility in Tips prior to SMR May-2023 Release 1 allows local attackers to launch arbitrary activity in Tips.
CVE-2023-21487 1 Samsung 1 Android 2024-11-21 N/A 5.1 MEDIUM
Improper access control vulnerability in Telephony framework prior to SMR May-2023 Release 1 allows local attackers to change a call setting.
CVE-2023-21486 1 Samsung 1 Android 2024-11-21 N/A 5.3 MEDIUM
Improper export of android application components vulnerability in ImagePreviewActivity in Call Settings to SMR May-2023 Release 1 allows physical attackers to access some media data stored in sandbox.
CVE-2023-21485 1 Samsung 1 Android 2024-11-21 N/A 5.3 MEDIUM
Improper export of android application components vulnerability in VideoPreviewActivity in Call Settings to SMR May-2023 Release 1 allows physical attackers to access some media data stored in sandbox.
CVE-2023-21484 1 Samsung 1 Android 2024-11-21 N/A 5.1 MEDIUM
Improper access control vulnerability in AppLock prior to SMR May-2023 Release 1 allows local attackers without proper permission to execute a privileged operation.
CVE-2023-21465 1 Samsung 1 Bixbytouch 2024-11-21 N/A 5.5 MEDIUM
Improper access control vulnerability in BixbyTouch prior to version 3.2.02.5 in China models allows untrusted applications access local files.
CVE-2023-21464 2 Google, Samsung 2 Android, Calendar 2024-11-21 N/A 4.0 MEDIUM
Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12 allows local attacker to configure improper status.
CVE-2023-21463 2 Google, Samsung 2 Android, Myfiles 2024-11-21 N/A 4.0 MEDIUM
Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in Android 12 and 14.1.03.0 in Android 13 allows local attacker to get sensitive information of secret mode in Samsung Internet application with specific conditions.
CVE-2023-21462 2 Google, Samsung 2 Android, Quick Share 2024-11-21 N/A 4.2 MEDIUM
The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local attacker to access MAC address without related permission.
CVE-2023-21461 1 Samsung 1 Android 2024-11-21 N/A 4.0 MEDIUM
Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows local attacker to turn device off via unprotected activity.
CVE-2023-21460 1 Samsung 1 Android 2024-11-21 N/A 4.4 MEDIUM
Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting.
CVE-2023-21459 1 Samsung 2 Android, Exynos 2100 2024-11-21 N/A 5.0 MEDIUM
Use after free vulnerability in decon driver prior to SMR Mar-2023 Release 1 allows attackers to cause memory access fault.