Filtered by vendor Samsung
Subscriptions
Total
969 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2023-42566 | 1 Samsung | 1 Android | 2023-12-08 | 7.8 High |
Out-of-bound write vulnerability in libsavsvc prior to SMR Dec-2023 Release 1 allows local attackers to execute arbitrary code. | ||||
CVE-2023-42565 | 1 Samsung | 1 Android | 2023-12-08 | 6.7 Medium |
Improper input validation vulnerability in Smart Clip prior to SMR Dec-2023 Release 1 allows local attackers with shell privilege to execute arbitrary code. | ||||
CVE-2023-42564 | 1 Samsung | 1 Android | 2023-12-08 | 5.5 Medium |
Improper access control in knoxcustom service prior to SMR Dec-2023 Release 1 allows attacker to send broadcast with system privilege. | ||||
CVE-2023-42563 | 1 Samsung | 1 Android | 2023-12-08 | 7.8 High |
Integer overflow vulnerability in landmarkCopyImageToNative of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attacker to trigger heap overflow. | ||||
CVE-2023-42555 | 1 Samsung | 1 Easysetup | 2023-11-15 | 5.5 Medium |
Use of implicit intent for sensitive communication vulnerability in EasySetup prior to version 11.1.13 allows attackers to get the bluetooth address of user device. | ||||
CVE-2023-42554 | 1 Samsung | 1 Pass | 2023-11-15 | 6.8 Medium |
Improper Authentication vulnerabiity in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication. | ||||
CVE-2023-42553 | 1 Samsung | 1 Email | 2023-11-15 | 5.3 Medium |
Improper authorization verification vulnerability in Samsung Email prior to version 6.1.90.4 allows attackers to read sandbox data of email. | ||||
CVE-2023-42552 | 1 Samsung | 2 Android, Firewall | 2023-11-15 | 3.3 Low |
Implicit intent hijacking vulnerability in Firewall application prior to versions 12.1.00.24 in Android 11, 13.1.00.16 in Android 12 and 14.1.00.7 in Android 13 allows 3rd party application to tamper the database of Firewall. | ||||
CVE-2023-42545 | 1 Samsung | 2 Android, Phone | 2023-11-15 | 7.5 High |
Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13 allows attackers to access location data. | ||||
CVE-2023-42544 | 1 Samsung | 1 Quick Share | 2023-11-15 | 5.5 Medium |
Improper access control vulnerability in Quick Share prior to 13.5.52.0 allows local attacker to access local files. | ||||
CVE-2023-42543 | 1 Samsung | 1 Bixby Voice | 2023-11-14 | 7.5 High |
Improper verification of intent by broadcast receiver vulnerability in Bixby Voice prior to version 3.3.35.12 allows attackers to access arbitrary data with Bixby Voice privilege. | ||||
CVE-2023-42542 | 1 Samsung | 1 Push Service | 2023-11-14 | 3.3 Low |
Improper access control vulnerability in Samsung Push Service prior to 3.4.10 allows local attackers to get register ID to identify the device. | ||||
CVE-2023-42541 | 1 Samsung | 1 Push Service | 2023-11-14 | 5.3 Medium |
Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id. | ||||
CVE-2023-42540 | 1 Samsung | 1 Account | 2023-11-14 | 5.5 Medium |
Improper access control vulnerability in Samsung Account prior to version 14.5.01.1 allows attackers to access sensitive information via implicit intent. | ||||
CVE-2023-42539 | 1 Samsung | 1 Health | 2023-11-14 | 5.5 Medium |
PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows local attackers to access data. | ||||
CVE-2023-41111 | 1 Samsung | 32 Exynos 1080, Exynos 1080 Firmware, Exynos 1280 and 29 more | 2023-11-14 | 7.5 High |
An issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem (Exynos 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, Modem 5123, Modem 5300, and Auto T5123). Improper handling of a length parameter inconsistency can cause abnormal termination of a mobile phone. This occurs in the RLC task and RLC module. | ||||
CVE-2023-41112 | 1 Samsung | 32 Exynos 1080, Exynos 1080 Firmware, Exynos 1280 and 29 more | 2023-11-14 | 7.5 High |
An issue was discovered in Samsung Mobile Processor, Wearable Processor, Automotive Processor, and Modem (Exynos 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 9110, W920, Modem 5123, Modem 5300, and Auto T5123). A buffer copy, without checking the size of the input, can cause abnormal termination of a mobile phone. This occurs in the RLC task and RLC module. | ||||
CVE-2023-30739 | 1 Samsung | 1 Android | 2023-11-13 | 7.8 High |
Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code. | ||||
CVE-2023-42550 | 1 Samsung | 1 Account | 2023-11-13 | 6.5 Medium |
Use of implicit intent for sensitive communication vulnerability in startSignIn in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege. | ||||
CVE-2023-42549 | 1 Samsung | 1 Account | 2023-11-13 | 6.5 Medium |
Use of implicit intent for sensitive communication vulnerability in startNameValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege. |