Vendor
Samsung Mobile
1,419 known vulnerabilities.
Products
Samsung Mobile Devices 866
Samsung Notes 61
Galaxy Store 29
Samsung Internet 29
Samsung Account 29
Smart Switch 20
Samsung Pass 16
SmartThings 15
Samsung Health 15
Samsung Members 14
Samsung Email 13
Samsung Flow 11
Blockchain Keystore 7
Samsung Blockchain Keystore 7
Smart Things 6
Tizen wearable devices 6
Samsung Pay 6
S Assistant 5
Samsung Voice Recorder 5
Samsung Gallery 5
Group Sharing 5
Samsung Cloud 5
Galaxy Wearable 5
Samsung Wearable Devices 5
Samsung Checkout 5
Charm by Samsung 5
Samsung Assistant 5
Find My Mobile 4
Gallery 4
Bixby Vision 4
Bixby 4
Smart Switch PC 4
Samsung Mobile Devices with Exynos chipsets 4
Samsung Camera 4
libsavsvc.so 4
Samsung Calendar 3
Galaxy Watch PlugIn 3
FactoryCamera 3
Secure Folder 3
GamingHub 3
1,002 results · Clear filters · Feed
-
Medium 5.5
Improper privilege management in ThemeManager prior to SMR Jun-2025 Release 1 allows local privileged attackers to reus…
-
Medium 6.8
Incorrect default permission in Samsung Cloud for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers t…
-
Medium 6.2
Improper access control in AudioService prior to SMR Jun-2025 Release 1 allows local attackers to access sensitive info…
-
Medium 4.0
Out-of-bounds write in libsavscmn prior to Android 15 allows local attackers to cause memory corruption.
-
Medium 6.2
Improper access control in PENUP prior to version 3.9.19.32 allows local attackers to access files with PENUP privilege.
-
Medium 5.5
Out-of-bounds read in applying binary of text content in Samsung Notes prior to version 4.4.29.23 allows attackers to r…
-
Medium 5.5
Improper Export of Android Application Components in AODService prior to version 8.8.28.12 allows local attackers to la…
-
Medium 6.1
Improper handling of insufficient permission in PackageInstallerCN prior to version 15.0.11.0 allows local attacker to …
-
Medium 5.4
Improper authentication in Secure Folder prior to version 1.8.12.0 in Android 13, and 1.9.21.00 in Android 14 allows ph…
-
Medium 6.2
Improper verification of intent by broadcast receiver in Samsung Flow prior to version 4.9.17.6 allows local attackers …
-
Medium 5.5
Improper input validation in Samsung Flow prior to version 4.9.17.6 allows local attackers to access data within Samsun…
-
Medium 6.2
Improper access control in Bixby Vision prior to version 3.8.1 in Android 13, 3.8.3 in Android 14, 3.8.21 in Android 15…
-
Medium 5.5
Improper input validation in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Androi…
-
Medium 5.1
Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android …
-
Medium 4.6
Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android …
-
Medium 6.2
Improper handling of insufficient permission in Bixby wakeup prior to version 2.3.74.8 allows local attackers to access…
-
Medium 6.6
Out-of-bounds write in parsing media files in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to wr…
-
Medium 6.6
Out-of-bounds write in memory initialization in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to …
-
Medium 4.0
Improper handling of insufficient permission in SpenGesture service prior to SMR May-2025 Release 1 allows local attack…
-
Medium 5.5
Improper handling of insufficient permission or privileges in sepunion service prior to SMR May-2025 Release 1 allows l…
-
Medium 4.0
Improper handling of insufficient permission in CocktailBarService prior to SMR May-2025 Release 1 allows local attacke…
-
Medium 5.1
Use of implicit intent for sensitive communication in Wi-Fi P2P service prior to SMR May-2025 Release 1 allows local at…
-
Medium 4.4
Improper verification of intent by broadcast receiver in UnifiedWFC prior to SMR May-2025 Release 1 allows local attack…
-
Medium 4.3
Improper export of android application components in Settings in Galaxy Watch prior to SMR May-2025 Release 1 allows ph…
-
Medium 5.5
Improper Export of Android Application Components in NotificationHistoryImageProvider prior to SMR May-2025 Release 1 a…
-
Medium 5.5
Use of implicit intent for sensitive communication in EnrichedCall prior to SMR May-2025 Release 1 allows local attacke…
-
Medium 5.1
Improper access control in SmartManagerCN prior to SMR May-2025 Release 1 allows local attackers to launch activities w…
-
Medium 5.1
Path traversal vulnerability in Samsung Members prior to version 5.0.00.11 allows attackers to read and write arbitrary…
-
Medium 6.7
Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write ou…
-
Medium 5.5
Improper access control in Mdecservice prior to SMR Apr-2025 Release 1 allows local attackers to access arbitrary files…
-
Medium 5.4
Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical at…
-
Medium 5.1
Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.90.7 allows lo…
-
Medium 4.0
Use of implicit intent for sensitive communication in SamsungNotes prior to version 4.4.26.45 allows local attackers to…
-
Medium 5.5
Out-of-bounds read in enrollment with cdsp frame secfr trustlet prior to SMR Apr-2025 Release 1 allows local privileged…
-
Medium 5.5
Improper handling of insufficient permission or privileges in ClipboardService prior to SMR Apr-2025 Release 1 allows l…
-
Medium 4.0
Improper access control in Galaxy Watch prior to SMR Apr-2025 Release 1 allows local attackers to access sensitive info…
-
Medium 6.2
Out-of-bounds read in parsing audio data in libsavsac.so prior to SMR Apr-2025 Release 1 allows local attackers to read…
-
Medium 6.4
Out-of-bounds write in secfr trustlet prior to SMR Apr-2025 Release 1 allows local privileged attackers to cause memory…
-
Medium 4.4
Improper Verification of Intent by Broadcast Receiver in DeviceIdService prior to SMR Apr-2025 Release 1 allows local a…
-
Medium 6.2
Improper access control in InputManager to SMR Apr-2025 Release 1 allows local attackers to access the scancode of spec…