Lucene search

K
SamsungAndroid14.0

179 matches found

CVE
CVE
added 2024/05/07 5:15 a.m.46 views

CVE-2024-20862

Out-of-bounds write in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code.

6.7CVSS7.2AI score0.00041EPSS
CVE
CVE
added 2024/05/07 5:15 a.m.45 views

CVE-2024-20857

Improper access control vulnerability in startListening of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of current application.

5.5CVSS6.2AI score0.00074EPSS
CVE
CVE
added 2024/05/07 5:15 a.m.45 views

CVE-2024-20863

Out of bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code.

6.7CVSS7.3AI score0.00055EPSS
CVE
CVE
added 2024/05/07 5:15 a.m.45 views

CVE-2024-20864

Improper access control vulnerability in DarManagerService prior to SMR May-2024 Release 1 allows local attackers to monitor system resources.

5.5CVSS6.5AI score0.00096EPSS
CVE
CVE
added 2024/06/04 7:15 a.m.45 views

CVE-2024-20884

Incorrect use of privileged API vulnerability in getSemBatteryUsageStats in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to use privileged API.

7.8CVSS6.8AI score0.0014EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.45 views

CVE-2024-20891

Improper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities.

7.8CVSS6.8AI score0.00035EPSS
CVE
CVE
added 2024/07/08 7:15 a.m.45 views

CVE-2024-34603

Improper access control in Samsung Message prior to SMR Jul-2024 Release 1 allows local attackers to access location data.

5.5CVSS4.3AI score0.00036EPSS
CVE
CVE
added 2025/02/04 8:15 a.m.45 views

CVE-2025-20893

Improper access control in NotificationManager prior to SMR Jan-2025 Release 1 allows local attackers to change the configuration of notifications.

5.1CVSS6.8AI score0.00031EPSS
CVE
CVE
added 2025/05/07 9:15 a.m.45 views

CVE-2025-20964

Out-of-bounds write in parsing media files in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory.

7.8CVSS6.4AI score0.00021EPSS
CVE
CVE
added 2024/04/02 3:15 a.m.44 views

CVE-2024-20842

Improper Input Validation vulnerability in handling apdu of libsec-ril prior to SMR Apr-2024 Release 1 allows local privileged attackers to write out-of-bounds memory.

6.7CVSS6.5AI score0.00038EPSS
CVE
CVE
added 2024/05/07 5:15 a.m.44 views

CVE-2024-20859

Improper access control vulnerability in FactoryCamera prior to SMR May-2024 Release 1 allows local attackers to take pictures without privilege.

5.5CVSS6.5AI score0.00077EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.44 views

CVE-2024-34594

Exposure of sensitive information in proc file system prior to SMR Jul-2024 Release 1 allows local attackers to read kernel memory address.

5.5CVSS6.2AI score0.00038EPSS
CVE
CVE
added 2024/07/08 7:15 a.m.44 views

CVE-2024-34602

Use of implicit intent for sensitive communication in Samsung Messages prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability.

5.5CVSS3.9AI score0.00027EPSS
CVE
CVE
added 2025/05/07 9:15 a.m.44 views

CVE-2025-20954

Use of implicit intent for sensitive communication in EnrichedCall prior to SMR May-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.

5.5CVSS5.4AI score0.00017EPSS
CVE
CVE
added 2025/05/07 9:15 a.m.44 views

CVE-2025-20961

Improper handling of insufficient permission or privileges in sepunion service prior to SMR May-2025 Release 1 allows local privileged attackers to access files with system privilege.

5.5CVSS5.3AI score0.00017EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.43 views

CVE-2024-20901

Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attackers to write out-of-bounds memory.

7.8CVSS7AI score0.00035EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.43 views

CVE-2024-34587

Improper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.

7.5CVSS7.9AI score0.00568EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.43 views

CVE-2024-34595

Improper access control in clickAdapterItem of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities.

7.8CVSS6.8AI score0.00035EPSS
CVE
CVE
added 2024/09/04 6:15 a.m.43 views

CVE-2024-34648

Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers to access sensitive data.

5.5CVSS6.7AI score0.00028EPSS
CVE
CVE
added 2024/11/06 3:15 a.m.43 views

CVE-2024-49402

Improper input validation in Dressroom prior to SMR Nov-2024 Release 1 allow physical attackers to access data across multiple user profiles.

4.6CVSS4.7AI score0.00043EPSS
CVE
CVE
added 2025/05/07 9:15 a.m.43 views

CVE-2025-20957

Improper access control in SmartManagerCN prior to SMR May-2025 Release 1 allows local attackers to launch arbitrary activities with SmartManagerCN privilege.

7.8CVSS7.1AI score0.00018EPSS
CVE
CVE
added 2025/05/07 9:15 a.m.43 views

CVE-2025-20960

Improper handling of insufficient permission in CocktailBarService prior to SMR May-2025 Release 1 allows local attackers to use the privileged api.

4CVSS4AI score0.00022EPSS
CVE
CVE
added 2025/05/07 9:15 a.m.43 views

CVE-2025-20962

Improper handling of insufficient permission in SpenGesture service prior to SMR May-2025 Release 1 allows local attackers to track the S Pen position.

4CVSS4.1AI score0.00021EPSS
CVE
CVE
added 2025/05/07 9:15 a.m.43 views

CVE-2025-20963

Out-of-bounds write in memory initialization in libsavsvc.so prior to SMR May-2025 Release 1 allows local attackers to write out-of-bounds memory.

7.8CVSS6.3AI score0.00021EPSS
CVE
CVE
added 2024/03/05 8:15 a.m.42 views

CVE-2024-20833

Use after free vulnerability in pub_crypto_recv_msg prior to SMR Mar-2024 Release 1 due to race condition allows local attackers with system privilege to cause memory corruption.

6.4CVSS4.7AI score0.00053EPSS
CVE
CVE
added 2024/04/02 3:15 a.m.42 views

CVE-2024-20849

Out-of-bound Write vulnerability in chunk parsing implementation of libsdffextractor prior to SMR Apr-2023 Release 1 allows local attackers to execute arbitrary code.

7.8CVSS7.3AI score0.0007EPSS
CVE
CVE
added 2024/09/04 6:15 a.m.42 views

CVE-2024-34646

Improper access control in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to cause local permanent denial of service.

6.6CVSS6.8AI score0.0004EPSS
CVE
CVE
added 2024/10/08 7:15 a.m.42 views

CVE-2024-34669

Out-of-bounds write in parsing h.263+ format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.

8.8CVSS8.2AI score0.00567EPSS
CVE
CVE
added 2024/11/06 3:15 a.m.42 views

CVE-2024-34674

Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles.

4.6CVSS4.6AI score0.00043EPSS
CVE
CVE
added 2023/12/05 3:15 a.m.41 views

CVE-2023-42570

Improper access control vulnerability in KnoxCustomManagerService prior to SMR Dec-2023 Release 1 allows attacker to access device SIM PIN.

5.9CVSS4.1AI score0.00135EPSS
CVE
CVE
added 2024/01/04 1:15 a.m.41 views

CVE-2024-20803

Improper authentication vulnerability in Bluetooth pairing process prior to SMR Jan-2024 Release 1 allows remote attackers to establish pairing process without user interaction.

6.8CVSS6.6AI score0.00093EPSS
CVE
CVE
added 2024/02/06 3:15 a.m.41 views

CVE-2024-20813

Out-of-bounds Write in padmd_vld_qtbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code.

8.4CVSS7.7AI score0.00153EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.41 views

CVE-2024-20889

Improper authentication in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to pair with devices.

5.9CVSS7.2AI score0.00036EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.41 views

CVE-2024-20899

Use of implicit intent for sensitive communication in RCS function in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.

5.5CVSS6.8AI score0.00036EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.41 views

CVE-2024-34585

Improper access control in launchApp of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activities.

7.8CVSS6.8AI score0.00035EPSS
CVE
CVE
added 2024/10/08 7:15 a.m.41 views

CVE-2024-34666

Out-of-bounds write in parsing h.264 format in a specific mode in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.

8.8CVSS8.1AI score0.00567EPSS
CVE
CVE
added 2024/11/06 3:15 a.m.41 views

CVE-2024-34677

Exposure of sensitive information in System UI prior to SMR Nov-2024 Release 1 allow local attackers to make malicious apps appear as legitimate.

4CVSS4.1AI score0.00032EPSS
CVE
CVE
added 2025/05/07 9:15 a.m.41 views

CVE-2025-20937

Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.

6.7CVSS6.3AI score0.00018EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.40 views

CVE-2024-34583

Improper access control in system property prior to SMR Jul-2024 Release 1 allows local attackers to get device identifier.

4CVSS6.8AI score0.00041EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.40 views

CVE-2024-34589

Improper input validation in parsing RTCP RR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability.

6.5CVSS7.1AI score0.00297EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.40 views

CVE-2024-34591

Improper input validation in parsing an item data from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability.

5.3CVSS7.1AI score0.00297EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.40 views

CVE-2024-34592

Improper input validation in parsing RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability.

5.3CVSS7.1AI score0.00297EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.40 views

CVE-2024-34593

Improper input validation in parsing and distributing RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.

8.8CVSS8.2AI score0.006EPSS
CVE
CVE
added 2024/09/04 6:15 a.m.40 views

CVE-2024-34641

Improper Export of Android Application Components in FeliCaTest prior to SMR Sep-2024 Release 1 allows local attackers to enable NFC configuration.

5.1CVSS6.8AI score0.00045EPSS
CVE
CVE
added 2024/09/04 6:15 a.m.40 views

CVE-2024-34652

Incorrect authorization in kperfmon prior to SMR Sep-2024 Release 1 allows local attackers to access information related to performance including app usage.

4CVSS6.6AI score0.00037EPSS
CVE
CVE
added 2024/11/06 3:15 a.m.40 views

CVE-2024-49401

Improper input validation in Settings Suggestions prior to SMR Nov-2024 Release 1 allows local attackers to launch privileged activities.

7.1CVSS5.1AI score0.00028EPSS
CVE
CVE
added 2023/12/05 3:15 a.m.39 views

CVE-2023-42564

Improper access control in knoxcustom service prior to SMR Dec-2023 Release 1 allows attacker to send broadcast with system privilege.

6.6CVSS5.4AI score0.0013EPSS
CVE
CVE
added 2024/07/02 10:15 a.m.39 views

CVE-2024-34586

Improper access control in KnoxCustomManagerService prior to SMR Jul-2024 Release 1 allows local attackers to configure Knox privacy policy.

5.9CVSS6.8AI score0.00043EPSS
CVE
CVE
added 2024/10/08 7:15 a.m.39 views

CVE-2024-34662

Improper access control in ActivityManager prior to SMR Oct-2024 Release 1 in select Android 12, 13 and SMR Sep-2024 Release 1 in select Android 14 allows local attackers to execute privileged behaviors.

7.8CVSS7.1AI score0.00033EPSS
CVE
CVE
added 2024/10/08 7:15 a.m.39 views

CVE-2024-34668

Out-of-bounds write in parsing h.263 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.

8.8CVSS8.2AI score0.00567EPSS
Total number of security vulnerabilities179