Browse CVEs

CRITICAL 9.8 CVE-2016-2566 Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices has SQL injection, aka SVE-2015-5081. Galaxy S6 Firmware Mitigation only Fix from $2,3002017-04-13 MEDIUM 6.8 CVE-2016-4030 Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I919… Galaxy S6 Firmware No fix yet Fix from $1,6002017-04-13 MEDIUM 6.8 CVE-2016-4031 Samsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3), GT-I9192 build I9192XXUBNB1 (Galaxy S4 mini), GT-I919… Galaxy S6 Firmware No fix yet Fix from $1,6002017-04-13 MEDIUM 5.5 CVE-2016-2036 The getURL function in drivers/secfilter/urlparser.c in secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G… Galaxy S6 Firmware No fix yet Fix from $1,6002017-04-13 MEDIUM 6.4 CVE-2015-8780 Samsung wssyncmlnps before 2015-10-31 allows directory traversal in a Kies restore, aka ZipFury. Kies after 2015-10-30 Fix from $1,6002017-04-13 HIGH 8.8 CVE-2015-7893EPSS 7% SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to execute arbitrary JavaScript. Galaxy S6 No fix yet Fix from $1,9502017-04-11 HIGH 8.0 CVE-2015-0863 GALAXY Apps (aka Samsung Apps, Samsung Updates, or com.sec.android.app.samsungapps) before 14120405.03.012 allows man-in-the-middle attackers to obta… Galaxy App Mitigation only Fix from $1,9502017-03-27 HIGH 8.0 CVE-2015-0864 Samsung Account (AKA com.osp.app.signin) before 1.6.0069 and 2.x before 2.1.0069 allows man-in-the-middle attackers to obtain sensitive information a… Galaxy App Mitigation only Fix from $1,9502017-03-27 CRITICAL 9.8 CVE-2015-5729 The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, whi… Nt14u Firmware No fix yet Fix from $2,3002017-03-23 CRITICAL 9.8 CVE-2017-5538 The kbase_dispatch function in arm/t7xx/r5p0/mali_kbase_core_linux.c in the GPU driver on Samsung devices with M(6.0) and N(7.0) software and Exynos … Samsung Mobile Patch available Fix from $2,3002017-03-23 HIGH 7.5 CVE-2016-4547 Samsung devices with Android KK(4.4), L(5.0/5.1), or M(6.0) allow attackers to cause a denial of service (system crash) via a crafted system call to … Samsung Mobile Mitigation only Fix from $1,9502017-02-13 MEDIUM 5.5 CVE-2016-4546 Samsung devices with Android KK(4.4) or L(5.0/5.1) allow local users to cause a denial of service (IAndroidShm service crash) via crafted data in a s… Samsung Mobile Mitigation only Fix from $1,6002017-02-13 HIGH 7.8 CVE-2016-4038 Array index error in the msm_sensor_config function in kernel/SM-G9008V_CHN_KK_Opensource/Kernel/drivers/media/platform/msm/camera_v2/sensor/msm_sens… Samsung Mobile Mitigation only Fix from $1,9502017-02-01 CRITICAL 9.8 CVE-2016-6604 NULL pointer dereference in Samsung Exynos fimg2d driver for Android L(5.0/5.1) and M(6.0) allows attackers to have unspecified impact via unknown ve… Exynos Fimg2d Mitigation only Fix from $2,3002017-01-30 MEDIUM 5.5 CVE-2016-1920 Samsung KNOX 1.0.0 uses the shared certificate on Android, which allows local users to conduct man-in-the-middle attacks as demonstrated by installin… Knox Mitigation only Fix from $1,6002017-01-27 MEDIUM 5.5 CVE-2016-3996 ClipboardDataMgr in Samsung KNOX 1.0.0 and 2.3.0 does not properly check the caller, which allows local users to read KNOX clipboard data via a craft… Knox No fix yet Fix from $1,6002017-01-27 HIGH 7.5 CVE-2016-9279 Use-after-free vulnerability in the Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 chipsets allows attackers to obtain sens… Exynos Fimg2d Driver Mitigation only Fix from $1,9502017-01-18 MEDIUM 5.5 CVE-2016-9278 The Samsung Exynos fimg2d driver for Android with Exynos 5433, 54xx, or 7420 chipsets allows local users to cause a denial of service (kernel panic) … Exynos Fimg2d Driver Mitigation only Fix from $1,6002017-01-18 HIGH 7.8 CVE-2016-6526 The SpamCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6.0) allows attackers to cause a denial of service (cr… Samsung Mobile Mitigation only Fix from $1,9502017-01-18 HIGH 7.8 CVE-2016-6527 The SmartCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6.0) allows attackers to cause a denial of service (c… Samsung Mobile Mitigation only Fix from $1,9502017-01-18 HIGH 7.5 CVE-2017-5350 Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allow attackers to crash systemUI by leveraging incomplete exception handling. The … Samsung Mobile Mitigation only Fix from $1,9502017-01-12 HIGH 7.5 CVE-2017-5351 Samsung Note devices with KK(4.4), L(5.0/5.1), and M(6.0) software allow attackers to crash the system by creating an arbitrarily large number of act… Samsung Mobile Mitigation only Fix from $1,9502017-01-12 MEDIUM 5.5 CVE-2017-5217 Installing a zero-permission Android application on certain Samsung Android devices with KK(4.4), L(5.0/5.1), and M(6.0) software can continually cra… Samsung Mobile Mitigation only Fix from $1,6002017-01-09 CRITICAL 9.8 CVE-2016-9965 Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) softw… Samsung Mobile Mitigation only Fix from $2,3002016-12-16 CRITICAL 9.8 CVE-2016-9966 Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) softw… Samsung Mobile Mitigation only Fix from $2,3002016-12-16 CRITICAL 9.8 CVE-2016-9967 Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) softw… Samsung Mobile Mitigation only Fix from $2,3002016-12-16 MEDIUM 5.5 CVE-2016-9567 The mDNIe system service on Samsung Mobile S7 devices with M(6.0) software does not properly restrict setmDNIeScreenCurtain API calls, enabling attac… Samsung Mobile Mitigation only Fix from $1,6002016-11-23 HIGH 7.5 CVE-2016-9277 Integer overflow in SystemUI in KK(4.4) and L(5.0/5.1) on Samsung Note devices allows attackers to cause a denial of service (UI restart) via vectors… Samsung Mobile Mitigation only Fix from $1,9502016-11-11 HIGH 7.5 CVE-2016-7160 A vulnerability on Samsung Mobile M(6.0) devices exists because external access to SystemUI activities is not properly restricted, leading to a Syste… Samsung Mobile Mitigation only Fix from $1,9502016-11-03 CRITICAL 9.8 CVE-2016-1329 Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardc… X14j Firmware 2.50+ Fix from $2,3002016-03-03