Vulnerabilities (CVE)

Filtered by vendor Samsung Subscribe
Total 1686 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-21478 1 Samsung 1 Android 2026-06-17 N/A 6.0 MEDIUM
Improper input validation vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data.
CVE-2023-21477 1 Samsung 1 Android 2026-06-17 N/A 7.9 HIGH
Access of Memory Location After End of Buffer vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data.
CVE-2023-21476 1 Samsung 1 Android 2026-06-17 N/A 8.0 HIGH
Out-of-bounds Write vulnerability in libaudiosaplus_sec.so library prior to SMR Apr-2023 Release 1 allows local attacker to execute arbitrary code.
CVE-2023-21475 1 Samsung 1 Android 2026-06-17 N/A 8.0 HIGH
Out-of-bounds Write vulnerability in libaudiosaplus_sec.so library prior to SMR Apr-2023 Release 1 allows local attacker to execute arbitrary code.
CVE-2023-21474 1 Samsung 1 Android 2026-06-17 N/A 6.3 MEDIUM
Intent redirection vulnerability in SecSettings prior to SMR Apr-2022 Release 1 allows attackers to access arbitrary file with system privilege.
CVE-2023-21473 1 Samsung 1 Android 2026-06-17 N/A 6.8 MEDIUM
Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader.
CVE-2023-21472 1 Samsung 1 Android 2026-06-17 N/A 6.8 MEDIUM
Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader.
CVE-2023-21471 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Improper access control vulnerability in SemClipboard prior to SMR Apr-2023 Release 1 allows attackers to read arbitrary files with system permission.
CVE-2023-21470 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information using com.samsung.android.wifi.NETWORK_LOCATION action.
CVE-2023-21469 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location information using com.samsung.android.wifi.GEOFENCE action.
CVE-2023-21468 1 Samsung 1 Android 2026-06-17 N/A 5.9 MEDIUM
Improper access control vulnerability in Telephony prior to SMR Apr-2023 Release 1 allows attackers to access files with escalated permission.
CVE-2023-21467 1 Samsung 1 Exynos 2026-06-17 N/A 4.6 MEDIUM
Error in 3GPP specification implementation in Exynos baseband prior to SMR Apr-2023 Release 1 allows incorrect handling of unencrypted message.
CVE-2023-21466 1 Samsung 1 Android 2026-06-17 N/A 5.3 MEDIUM
PendingIntent hijacking vulnerability in CertificatePolicy in framework prior to SMR Apr-2023 Release 1 allows local attackers to access contentProvider without proper permission.
CVE-2023-21465 1 Samsung 1 Bixbytouch 2026-06-17 N/A 5.5 MEDIUM
Improper access control vulnerability in BixbyTouch prior to version 3.2.02.5 in China models allows untrusted applications access local files.
CVE-2023-21464 2 Google, Samsung 2 Android, Calendar 2026-06-17 N/A 4.0 MEDIUM
Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12 allows local attacker to configure improper status.
CVE-2023-21463 2 Google, Samsung 2 Android, Myfiles 2026-06-17 N/A 4.0 MEDIUM
Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in Android 12 and 14.1.03.0 in Android 13 allows local attacker to get sensitive information of secret mode in Samsung Internet application with specific conditions.
CVE-2023-21462 2 Google, Samsung 2 Android, Quick Share 2026-06-17 N/A 4.2 MEDIUM
The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local attacker to access MAC address without related permission.
CVE-2023-21461 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows local attacker to turn device off via unprotected activity.
CVE-2023-21460 1 Samsung 1 Android 2026-06-17 N/A 4.4 MEDIUM
Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting.
CVE-2023-21459 1 Samsung 2 Android, Exynos 2100 2026-06-17 N/A 5.0 MEDIUM
Use after free vulnerability in decon driver prior to SMR Mar-2023 Release 1 allows attackers to cause memory access fault.