Browse CVEs

HIGH 7.5 CVE-2023-30729 Improper Certificate Validation in Samsung Email prior to version 6.1.82.0 allows remote attacker to intercept the network traffic including sensitiv… Email 6.1.82.0+ Fix from $1,9502023-09-06 MEDIUM 5.5 CVE-2023-30725 Improper authentication in LocalProvier of Gallery prior to version 14.5.01.2 allows attacker to access the data in content provider. Gallery 14.5.01.2+ Fix from $1,6002023-09-06 MEDIUM 5.5 CVE-2023-30726 PendingIntent hijacking vulnerability in GameLauncher prior to version 4.2.59.5 allows local attackers to access data. Gamelauncher 4.2.59.5+ Fix from $1,6002023-09-06 MEDIUM 5.5 CVE-2023-30728 Intent redirection vulnerability in PackageInstallerCHN prior to version 13.1.03.00 allows local attacker to access arbitrary file. This vulnerabilit… Packageinstallerchn 13.1.03.00+ Fix from $1,6002023-09-06 CRITICAL 9.8 CVE-2023-30723 Improper input validation vulnerability in Samsung Health prior to version 6.24.2.011 allows attackers to write arbitrary file with Samsung Health pr… Health 6.24.2.011+ Fix from $2,3002023-09-06 HIGH 7.8 CVE-2023-30722 Protection Mechanism Failure in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.13.5 allows local attacker to execute arbitrary… Blockchain Keystore 1.3.13.5+ Fix from $1,9502023-09-06 MEDIUM 5.5 CVE-2023-30720 PendingIntent hijacking in LmsAssemblyTrackerCTC prior to SMR Sep-2023 Release 1 allows local attacker to gain arbitrary file access. Android Mitigation only Fix from $1,6002023-09-06 MEDIUM 5.5 CVE-2023-30716 Improper access control vulnerability in SVCAgent prior to SMR Sep-2023 Release 1 allows attackers to trigger certain commands. Android No fix yet Fix from $1,6002023-09-06 HIGH 7.8 CVE-2023-30712 Improper input validation in Settings Suggestions prior to SMR Sep-2023 Release 1 allows attackers to launch arbitrary activity. Android Mitigation only Fix from $1,9502023-09-06 MEDIUM 5.5 CVE-2023-30713 Improper privilege management vulnerability in FolderLockNotifier in One UI Home prior to SMR Sep-2023 Release 1 allows local attackers to change som… Android Mitigation only Fix from $1,6002023-09-06 HIGH 7.8 CVE-2023-30710 Improper input validation vulnerability in Knox AI prior to SMR Sep-2023 Release 1 allows local attackers to launch privileged activities. Android Mitigation only Fix from $1,9502023-09-06 HIGH 7.5 CVE-2023-30708 Improper authentication in SecSettings prior to SMR Sep-2023 Release 1 allows attacker to access Captive Portal Wi-Fi in Reactivation Lock status. Android Mitigation only Fix from $1,9502023-09-06 HIGH 7.1 CVE-2023-30707 Improper input validation vulnerability in FileProviderStatusReceiver in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows local attackers to d… Android Mitigation only Fix from $1,9502023-09-06 MEDIUM 6.7 CVE-2023-30709 Improper access control in Dual Messenger prior to SMR Sep-2023 Release 1 allows local attackers launch activity with system privilege. Android Mitigation only Fix from $1,6002023-09-06 HIGH 7.5 CVE-2023-36481 An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, 911… Exynos 9810 Firmware Mitigation only Fix from $1,9502023-08-28 HIGH 7.5 CVE-2021-35309 An issue discovered in Samsung SyncThru Web Service SPL 5.93 06-09-2014 allows attackers to gain escalated privileges via MITM attacks. Syncthru Web Service No fix yet Fix from $1,9502023-08-22 MEDIUM 6.1 CVE-2020-22181 A reflected cross site scripting (XSS) vulnerability was discovered on Samsung sww-3400rw Router devices via the m2 parameter of the sess-bin/command… Sww 3400rw Firmware Mitigation only Fix from $1,6002023-08-22 MEDIUM 6.8 CVE-2023-40291 Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name. Harman Infotainment No fix yet Fix from $1,6002023-08-14 MEDIUM 6.8 CVE-2023-40293 Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object. Harman Infotainment No fix yet Fix from $1,6002023-08-14 CRITICAL 9.8 CVE-2023-30699 Out-of-bounds write vulnerability in parser_hvcC function of libsimba library prior to SMR Aug-2023 Release 1 allows code execution by remote attacke… Android Mitigation only Fix from $2,3002023-08-10 HIGH 7.8 CVE-2023-30696 An improper input validation in IpcTxGetVerifyAkey in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write. Android Mitigation only Fix from $1,9502023-08-10 HIGH 7.8 CVE-2023-30697 An improper input validation in IpcTxCfgSetSimlockPayload in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write. Android Mitigation only Fix from $1,9502023-08-10 HIGH 7.8 CVE-2023-30702 Stack overflow vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" in Windows Update… Galaxy Book Go Firmware Mitigation only Fix from $1,9502023-08-10 MEDIUM 5.5 CVE-2023-30698 Improper access control vulnerability in TelephonyUI prior to SMR Aug-2023 Release 1 allows local attacker to connect BLE without privilege. Android Mitigation only Fix from $1,6002023-08-10 MEDIUM 5.5 CVE-2023-30701 PendingIntent hijacking in WifiGeofenceManager prior to SMR Aug-2023 Release 1 allows local attacker to arbitrary file access. Android Mitigation only Fix from $1,6002023-08-10 MEDIUM 5.5 CVE-2023-30705 Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.56.6?allows local attackers to access privileged content providers as G… Galaxy Store 4.5.56.6+ Fix from $1,6002023-08-10 HIGH 7.8 CVE-2023-30686 Out-of-bounds Write in ReqDataRaw of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code. Android Mitigation only Fix from $1,9502023-08-10 HIGH 7.8 CVE-2023-30687 Out-of-bounds Write in RmtUimApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code. Android Mitigation only Fix from $1,9502023-08-10 HIGH 7.8 CVE-2023-30688 Out-of-bounds Write in MakeUiccAuthForOem of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code. Android Mitigation only Fix from $1,9502023-08-10 HIGH 7.8 CVE-2023-30689 Out-of-bounds Write in BuildOemEmbmsGetSigStrengthResponse of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary c… Android Mitigation only Fix from $1,9502023-08-10