Browse CVEs

HIGH 7.8 CVE-2018-9141 On Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software, Gallery allows remote attackers to execute arbitrary code via a BMP file with a c… Samsung Mobile Mitigation only Fix from $1,9502018-03-30 HIGH 7.0 CVE-2018-9142 On Samsung mobile devices with N(7.x) software, attackers can install an arbitrary APK in the Secure Folder SD Card area because of faulty validation… Samsung Mobile Mitigation only Fix from $1,9502018-03-30 MEDIUM 6.1 CVE-2018-9140 On Samsung mobile devices with M(6.0) software, the Email application allows XSS via an event attribute and arbitrary file loading via a src attribut… Samsung Mobile Mitigation only Fix from $1,6002018-03-30 MEDIUM 5.9 CVE-2017-10963 In Knox SDS IAM (Identity Access Management) and EMM (Enterprise Mobility Management) 16.11 on Samsung mobile devices, a man-in-the-middle attacker c… Knox Enterprise Mobility Management Mitigation only Fix from $1,6002018-02-20 HIGH 8.4 CVE-2017-18020 On Samsung mobile devices with L(5.x), M(6.x), and N(7.x) software and Exynos chipsets, attackers can execute arbitrary code in the bootloader becaus… Samsung Mobile Mitigation only Fix from $1,9502018-01-04 HIGH 8.1 CVE-2018-5210 On Samsung mobile devices with N(7.x) software and Exynos chipsets, attackers can conduct a Trustlet stack overflow attack for arbitrary TEE code exe… Samsung Mobile Mitigation only Fix from $1,9502018-01-04 MEDIUM 6.1 CVE-2017-17859 Samsung Internet Browser 6.2.01.12 allows remote attackers to bypass the Same Origin Policy, and conduct UXSS attacks to obtain sensitive information… Internet Browser Mitigation only Fix from $1,6002017-12-27 HIGH 7.5 CVE-2017-17692EPSS 79% Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript co… Internet Browser No fix yet Fix from $1,9502017-12-21 HIGH 8.1 CVE-2017-14262 On Samsung NVR devices, remote attackers can read the MD5 password hash of the 'admin' account via certain szUserName JSON data to cgi-bin/main-cgi, … Srn 1670d Firmware Mitigation only Fix from $1,9502017-09-11 CRITICAL 9.8 CVE-2015-1801 The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to cause a denial of service (memory cor… Galaxy S4 Firmware Mitigation only Fix from $2,3002017-08-24 HIGH 7.5 CVE-2015-1800 The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to potentially obtain sensitive informat… Galaxy S4 Firmware No fix yet Fix from $1,9502017-08-24 MEDIUM 6.5 CVE-2015-7896EPSS 7% LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service (memory corruption and SIGSEGV) via… Samsung Mobile No fix yet Fix from $1,6002017-08-24 HIGH 8.8 CVE-2015-7894EPSS 9% The DCMProvider service in Samsung LibQjpeg on a Samsung SM-G925V device running build number LRX22G.G925VVRU1AOE2 allows remote attackers to cause a… Galaxy S6 Edge Firmware No fix yet Fix from $1,9502017-08-09 HIGH 7.0 CVE-2015-7891 Race condition in the ioctl implementation in the Samsung Graphics 2D driver (aka /dev/fimg2d) in Samsung devices with Android L(5.0/5.1) allows loca… Samsung Mobile No fix yet Fix from $1,9502017-08-02 MEDIUM 5.5 CVE-2015-7895 Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service (process crash). Samsung Mobile No fix yet Fix from $1,6002017-06-27 MEDIUM 5.5 CVE-2015-7898 Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service (process crash). Samsung Mobile No fix yet Fix from $1,6002017-06-27 HIGH 8.8 CVE-2017-3218 Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.0, Samsung Magician uses HTTP for softw… Magician Mitigation only Fix from $1,9502017-06-21 HIGH 7.5 CVE-2015-7888 Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or c… Galaxy S6 Edge Firmware No fix yet Fix from $1,9502017-06-07 CRITICAL 9.8 CVE-2015-5473EPSS 13% Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete arbitrary files via unspecified parame… Syncthru 6 Mitigation only Fix from $2,3002017-06-01 HIGH 7.5 CVE-2017-7978 Samsung Android devices with L(5.0/5.1), M(6.0), and N(7.x) software allow attackers to obtain sensitive information by reading a world-readable log … Samsung Mobile Mitigation only Fix from $1,9502017-04-19 CRITICAL 9.8 CVE-2016-2566 Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices has SQL injection, aka SVE-2015-5081. Galaxy S6 Firmware Mitigation only Fix from $2,3002017-04-13 MEDIUM 6.8 CVE-2016-4030 Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I919… Galaxy S6 Firmware No fix yet Fix from $1,6002017-04-13 MEDIUM 6.8 CVE-2016-4031 Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I919… Galaxy S6 Firmware No fix yet Fix from $1,6002017-04-13 MEDIUM 5.5 CVE-2016-2036 The getURL function in drivers/secfilter/urlparser.c in secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G… Galaxy S6 Firmware No fix yet Fix from $1,6002017-04-13 HIGH 8.8 CVE-2015-7893EPSS 7% SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to execute arbitrary JavaScript. Galaxy S6 No fix yet Fix from $1,9502017-04-11 HIGH 8.0 CVE-2015-0863 GALAXY Apps (aka Samsung Apps, Samsung Updates, or com.sec.android.app.samsungapps) before 14120405.03.012 allows man-in-the-middle attackers to obta… Galaxy App Mitigation only Fix from $1,9502017-03-27 HIGH 8.0 CVE-2015-0864 Samsung Account (AKA com.osp.app.signin) before 1.6.0069 and 2.x before 2.1.0069 allows man-in-the-middle attackers to obtain sensitive information a… Galaxy App Mitigation only Fix from $1,9502017-03-27 CRITICAL 9.8 CVE-2015-5729 The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, whi… Nt14u Firmware No fix yet Fix from $2,3002017-03-23 HIGH 7.5 CVE-2016-4547 Samsung devices with Android KK(4.4), L(5.0/5.1), or M(6.0) allow attackers to cause a denial of service (system crash) via a crafted system call to … Samsung Mobile Mitigation only Fix from $1,9502017-02-13 MEDIUM 5.5 CVE-2016-4546 Samsung devices with Android KK(4.4) or L(5.0/5.1) allow local users to cause a denial of service (IAndroidShm service crash) via crafted data in a s… Samsung Mobile Mitigation only Fix from $1,6002017-02-13