Lucene search

K
SamsungAndroid13.0

286 matches found

CVE
CVE
added 2025/02/04 8:15 a.m.49 views

CVE-2025-20907

Improper privilege management in Samsung Find prior to SMR Feb-2025 Release 1 allows local privileged attackers to disable Samsung Find.

6CVSS6.8AI score0.00026EPSS
CVE
CVE
added 2023/02/09 7:15 p.m.48 views

CVE-2023-21436

Improper usage of implicit intent in Contacts prior to SMR Feb-2023 Release 1 allows attacker to get account ID.

3.3CVSS4.1AI score0.00088EPSS
CVE
CVE
added 2023/02/09 7:15 p.m.48 views

CVE-2023-21437

Improper access control vulnerability in Phone application prior to SMR Feb-2023 Release 1 allows local attackers to access sensitive information via implicit broadcast.

5.5CVSS5.2AI score0.00056EPSS
CVE
CVE
added 2023/11/07 8:15 a.m.48 views

CVE-2023-42538

An improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.

7.8CVSS7.3AI score0.00066EPSS
CVE
CVE
added 2024/03/05 5:15 a.m.48 views

CVE-2024-20835

Improper access control vulnerability in CustomFrequencyManagerService prior to SMR Mar-2024 Release 1 allows local attackers to execute privileged behaviors.

7.8CVSS4.5AI score0.0007EPSS
CVE
CVE
added 2024/04/02 3:15 a.m.48 views

CVE-2024-20847

Improper Access Control vulnerability in StorageManagerService prior to SMR Apr-2024 Release 1 allows local attackers to read sdcard information.

4CVSS6.4AI score0.00081EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.48 views

CVE-2024-20895

Improper access control in Dar service prior to SMR Jul-2024 Release 1 allows local attackers to bypass restriction for calling SDP features.

7.7CVSS6.9AI score0.00046EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.48 views

CVE-2024-20898

Use of implicit intent for sensitive communication in SoftphoneClient in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.

5.5CVSS6.8AI score0.00036EPSS
CVE
CVE
added 2024/12/03 6:15 a.m.48 views

CVE-2024-49413

Improper Verification of Cryptographic Signature in SmartSwitch prior to SMR Dec-2024 Release 1 allows local attackers to install malicious applications.

7.8CVSS6.8AI score0.0003EPSS
CVE
CVE
added 2025/02/04 8:15 a.m.48 views

CVE-2025-20891

Out-of-bounds read in decoding malformed bitstream of video thumbnails in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary memory. User interaction is required for triggering this vulnerability.

5.5CVSS6.9AI score0.00017EPSS
CVE
CVE
added 2025/02/04 8:15 a.m.48 views

CVE-2025-20904

Out-of-bounds write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged attackers to cause memory corruption.

6.7CVSS6.8AI score0.00026EPSS
CVE
CVE
added 2023/02/09 7:15 p.m.47 views

CVE-2023-21427

Improper access control vulnerability in NfcTile prior to SMR Jan-2023 Release 1 allows to attacker to use NFC without user recognition.

6.5CVSS6.3AI score0.00051EPSS
CVE
CVE
added 2023/03/16 9:15 p.m.47 views

CVE-2023-21456

Path traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows attacker to access arbitrary file with system uid.

9CVSS5.5AI score0.00111EPSS
CVE
CVE
added 2023/03/16 9:15 p.m.47 views

CVE-2023-21460

Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting.

4.4CVSS4.8AI score0.00041EPSS
CVE
CVE
added 2023/08/10 2:15 a.m.47 views

CVE-2023-30697

An improper input validation in IpcTxCfgSetSimlockPayload in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.

7.8CVSS7.4AI score0.00028EPSS
CVE
CVE
added 2023/11/07 8:15 a.m.47 views

CVE-2023-42531

Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on starting activities from the background.

7.1CVSS6.7AI score0.00016EPSS
CVE
CVE
added 2024/02/06 3:15 a.m.47 views

CVE-2024-20811

Improper caller verification in GameOptimizer prior to SMR Feb-2024 Release 1 allows local attackers to configure GameOptimizer.

5.1CVSS4AI score0.00047EPSS
CVE
CVE
added 2024/05/07 5:15 a.m.47 views

CVE-2024-20858

Improper access control vulnerability in setCocktailHostCallbacks of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of current application.

5.5CVSS6.2AI score0.00074EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.47 views

CVE-2024-20896

Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.

5.5CVSS6.8AI score0.00041EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.47 views

CVE-2024-34590

Improper input validation혻in parsing an item type from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability.

5.3CVSS4.9AI score0.00297EPSS
CVE
CVE
added 2024/05/07 5:15 a.m.46 views

CVE-2024-20861

Use after free vulnerability in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to cause memory corruption.

6.7CVSS6.8AI score0.00068EPSS
CVE
CVE
added 2024/05/07 5:15 a.m.46 views

CVE-2024-20862

Out-of-bounds write in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code.

6.7CVSS7.2AI score0.00041EPSS
CVE
CVE
added 2023/08/10 2:15 a.m.45 views

CVE-2023-30693

Out-of-bounds Write in DoOemFactorySendFactoryBypassCommand of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.

7.8CVSS7.7AI score0.00008EPSS
CVE
CVE
added 2024/05/07 5:15 a.m.45 views

CVE-2024-20857

Improper access control vulnerability in startListening of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of current application.

5.5CVSS6.2AI score0.00074EPSS
CVE
CVE
added 2024/05/07 5:15 a.m.45 views

CVE-2024-20863

Out of bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code.

6.7CVSS7.3AI score0.00055EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.45 views

CVE-2024-20891

Improper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities.

7.8CVSS6.8AI score0.00035EPSS
CVE
CVE
added 2024/07/08 7:15 a.m.45 views

CVE-2024-34603

Improper access control in Samsung Message prior to SMR Jul-2024 Release 1 allows local attackers to access location data.

5.5CVSS4.3AI score0.00036EPSS
CVE
CVE
added 2025/05/07 9:15 a.m.45 views

CVE-2025-20964

Out-of-bounds write in parsing media files in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory.

7.8CVSS6.4AI score0.00021EPSS
CVE
CVE
added 2023/03/16 9:15 p.m.44 views

CVE-2023-21458

Improper privilege management vulnerability in PhoneStatusBarPolicy in System UI prior to SMR Mar-2023 Release 1 allows attacker to turn off Do not disturb via unprotected intent.

6.2CVSS4.1AI score0.00055EPSS
CVE
CVE
added 2023/05/04 9:15 p.m.44 views

CVE-2023-21499

Out-of-bounds write vulnerability in TA_Communication_mpos_encrypt_pin in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code.

8.2CVSS7.7AI score0.00029EPSS
CVE
CVE
added 2023/08/10 2:15 a.m.44 views

CVE-2023-30685

Improper access control vulnerability in Telecom prior to SMR Aug-2023 Release 1 allows local attakcers to change TTY mode.

4.3CVSS4AI score0.00064EPSS
CVE
CVE
added 2023/09/06 4:15 a.m.44 views

CVE-2023-30708

Improper authentication in SecSettings prior to SMR Sep-2023 Release 1 allows attacker to access Captive Portal Wi-Fi in Reactivation Lock status.

7.5CVSS7.5AI score0.00254EPSS
CVE
CVE
added 2023/10/04 4:15 a.m.44 views

CVE-2023-30727

Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary Wi-Fi without User Interaction.

7.5CVSS7.5AI score0.00094EPSS
CVE
CVE
added 2024/04/02 3:15 a.m.44 views

CVE-2024-20842

Improper Input Validation vulnerability in handling apdu of libsec-ril prior to SMR Apr-2024 Release 1 allows local privileged attackers to write out-of-bounds memory.

6.7CVSS6.5AI score0.00038EPSS
CVE
CVE
added 2024/05/07 5:15 a.m.44 views

CVE-2024-20859

Improper access control vulnerability in FactoryCamera prior to SMR May-2024 Release 1 allows local attackers to take pictures without privilege.

5.5CVSS6.5AI score0.00077EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.44 views

CVE-2024-34594

Exposure of sensitive information in proc file system prior to SMR Jul-2024 Release 1 allows local attackers to read kernel memory address.

5.5CVSS6.2AI score0.00038EPSS
CVE
CVE
added 2024/07/08 7:15 a.m.44 views

CVE-2024-34602

Use of implicit intent for sensitive communication in Samsung Messages prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability.

5.5CVSS3.9AI score0.00027EPSS
CVE
CVE
added 2025/05/07 9:15 a.m.44 views

CVE-2025-20954

Use of implicit intent for sensitive communication in EnrichedCall prior to SMR May-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.

5.5CVSS5.4AI score0.00017EPSS
CVE
CVE
added 2025/05/07 9:15 a.m.44 views

CVE-2025-20961

Improper handling of insufficient permission or privileges in sepunion service prior to SMR May-2025 Release 1 allows local privileged attackers to access files with system privilege.

5.5CVSS5.3AI score0.00017EPSS
CVE
CVE
added 2023/08/10 2:15 a.m.43 views

CVE-2023-30681

An improper input validation vulnerability within initialize function in HAL VaultKeeper prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.

7.8CVSS7.4AI score0.00028EPSS
CVE
CVE
added 2023/08/10 2:15 a.m.43 views

CVE-2023-30691

Parcel mismatch in AuthenticationConfig prior to SMR Aug-2023 Release 1 allows local attacker to privilege escalation.

8.4CVSS7.4AI score0.00049EPSS
CVE
CVE
added 2023/08/10 2:15 a.m.43 views

CVE-2023-30694

Out-of-bounds Write in IpcTxPcscTransmitApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code.

7.8CVSS7.7AI score0.00029EPSS
CVE
CVE
added 2023/08/10 2:15 a.m.43 views

CVE-2023-30700

PendingIntent hijacking vulnerability in SemWifiApTimeOutImpl in framework prior to SMR Aug-2023 Release 1 allows local attackers to access ContentProvider without proper permission.

5.3CVSS4AI score0.00067EPSS
CVE
CVE
added 2023/09/06 4:15 a.m.43 views

CVE-2023-30721

Insertion of sensitive information into log vulnerability in Locksettings prior to SMR Sep-2023 Release 1 allows a privileged local attacker to get lock screen match information from the log.

4.4CVSS4.3AI score0.00065EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.43 views

CVE-2024-20901

Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attackers to write out-of-bounds memory.

7.8CVSS7AI score0.00035EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.43 views

CVE-2024-34587

Improper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.

7.5CVSS7.9AI score0.00568EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.43 views

CVE-2024-34595

Improper access control in clickAdapterItem of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities.

7.8CVSS6.8AI score0.00035EPSS
CVE
CVE
added 2024/09/04 6:15 a.m.43 views

CVE-2024-34648

Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers to access sensitive data.

5.5CVSS6.7AI score0.00028EPSS
CVE
CVE
added 2025/05/07 9:15 a.m.43 views

CVE-2025-20957

Improper access control in SmartManagerCN prior to SMR May-2025 Release 1 allows local attackers to launch arbitrary activities with SmartManagerCN privilege.

7.8CVSS7.1AI score0.00018EPSS
CVE
CVE
added 2025/05/07 9:15 a.m.43 views

CVE-2025-20960

Improper handling of insufficient permission in CocktailBarService prior to SMR May-2025 Release 1 allows local attackers to use the privileged api.

4CVSS4AI score0.00022EPSS
Total number of security vulnerabilities286