Vulnerabilities > Samsung > Low

DATE CVE VULNERABILITY TITLE RISK
2022-02-11 CVE-2022-23434 Unspecified vulnerability in Samsung Bixby 3.7.50.6
A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below allows attackers to execute privileged action by hijacking and modifying the intent.
local
low complexity
samsung
3.3
2022-01-10 CVE-2022-22283 Insufficient Session Expiration vulnerability in Samsung Health 6.16/6.17/6.19.1.0001
Improper session management vulnerability in Samsung Health prior to 6.20.1.005 prevents logging out from Samsung Health App.
local
low complexity
samsung CWE-613
3.3
2021-12-08 CVE-2021-25527 Unspecified vulnerability in Samsung PAY
Improper export of Android application components vulnerability in Samsung Pay (India only) prior to version 4.1.77 allows attacker to access Bill Pay and Recharge menu without authentication.
local
low complexity
samsung
3.3
2021-12-08 CVE-2021-25524 Insecure Storage of Sensitive Information vulnerability in Samsung Contacts
Insecure storage of device information in Contacts prior to version 12.7.05.24 allows attacker to get Samsung Account ID.
local
low complexity
samsung CWE-922
3.3
2021-12-08 CVE-2021-25523 Insecure Storage of Sensitive Information vulnerability in Samsung Dialer
Insecure storage of device information in Samsung Dialer prior to version 12.7.05.24 allows attacker to get Samsung Account ID.
local
low complexity
samsung CWE-922
3.3
2021-12-08 CVE-2021-25522 Insecure Storage of Sensitive Information vulnerability in Samsung Smart Capture
Insecure storage of sensitive information vulnerability in Smart Capture prior to version 4.8.02.10 allows attacker to access victim's captured images without permission.
local
low complexity
samsung CWE-922
3.3
2021-12-08 CVE-2021-25521 Files or Directories Accessible to External Parties vulnerability in Samsung Internet
Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get current tab URL in Samsung Internet.
local
low complexity
samsung CWE-552
3.3
2021-09-09 CVE-2021-25463 Unspecified vulnerability in Samsung Penup
Improper access control vulnerability in PENUP prior to version 3.8.00.18 allows arbitrary webpage loading in webview.
local
low complexity
samsung
3.3
2021-07-08 CVE-2021-25439 Unspecified vulnerability in Samsung Members 2.4.81.13/3.9.10.11
Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to cause arbitrary webpage loading in webview.
local
low complexity
samsung
3.3
2021-07-08 CVE-2021-25432 Exposure of Resource to Wrong Sphere vulnerability in Samsung Members
Information exposure vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to access chat data.
local
low complexity
samsung CWE-668
3.3