Skip to content
Noroxi

Samsung records

1,689 published records for vendor samsung.

Researcher profile

Entered KEV
16 · 0.9%
Weaponized
20 · 1.2%
Pre-auth RCE
84
With a fix record
2.3%
Median publish → KEV
618 days

Records by year

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

1,689 records
  • CVE-2024-7399
    97Now

    Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attack

    CriticalCVSS 9.8KEVWeaponizedEPSS 91%

    samsung · magicinfo 9 serverAug 12, 2024

  • CVE-2025-21042
    80Now

    Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.

    CriticalCVSS 9.8KEVWeaponizedEPSS 35%

    samsung · androidSep 12, 2025

  • CVE-2025-4632
    76This week

    Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attack

    CriticalCVSS 9.8KEVWeaponizedEPSS 24%

    samsung · magicinfo 9 serverMay 13, 2025

  • CVE-2016-1010
    71This week

    Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577

    HighCVSS 8.8KEVWeaponizedEPSS 19%

    adobe · flash playerMar 12, 2016

  • CVE-2025-21043
    70This week

    Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.

    CriticalCVSS 9.8KEVWeaponizedEPSS 2%

    samsung · androidSep 12, 2025

  • CVE-2021-25487
    61This week

    Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it res

    HighCVSS 7.8KEVWeaponizedEPSS 0%

    samsung · androidOct 6, 2021

  • CVE-2022-22265
    61This week

    An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code

    HighCVSS 7.8KEVWeaponizedEPSS 0%

    google · androidJan 10, 2022

  • CVE-2017-17692
    60This week

    Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted Java

    HighCVSS 7.5WeaponizedEPSS 78%

    samsung · internet browserDec 21, 2017

  • CVE-2015-8279
    60This week

    Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to read arbitrary files via a request to an unspecified PHP script

    HighCVSS 8.6WeaponizedEPSS 51%

    samsung · web viewerJan 14, 2016

  • CVE-2021-25337
    59Plan

    Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read

    HighCVSS 7.1KEVWeaponizedEPSS 2%

    samsung · androidMar 4, 2021

  • CVE-2012-4333
    58Plan

    Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0 ActiveX controls in

    CriticalCVSS 10.0WeaponizedEPSS 59%

    samsung · net-i viewerAug 14, 2012

  • CVE-2021-25372
    56Plan

    An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.

    MediumCVSS 6.7KEVWeaponizedEPSS 0%

    samsung · androidMar 26, 2021

  • CVE-2021-25371
    56Plan

    A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.

    MediumCVSS 6.7KEVWeaponizedEPSS 0%

    samsung · androidMar 26, 2021

  • CVE-2021-25394
    55Plan

    A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio

    MediumCVSS 6.4KEVWeaponizedEPSS 0%

    samsung · androidJun 11, 2021

  • CVE-2021-25395
    55Plan

    A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privil

    MediumCVSS 6.4KEVWeaponizedEPSS 0%

    samsung · androidJun 11, 2021

  • CVE-2021-25369
    52Plan

    An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.

    MediumCVSS 5.5KEVWeaponizedEPSS 1%

    samsung · androidMar 26, 2021

  • CVE-2021-25489
    52Plan

    Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format st

    MediumCVSS 5.5KEVWeaponizedEPSS 0%

    samsung · androidOct 6, 2021

  • CVE-2025-54453
    49Plan

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allow

    CriticalCVSS 9.8No exploitEPSS 34%

    samsung · magicinfo 9 serverJul 23, 2025

  • CVE-2023-24033
    49Plan

    The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets do not properly chec

    CriticalCVSS 9.8No exploitEPSS 32%

    samsung · exynos modem 5300 firmwareMar 13, 2023

  • CVE-2012-3807
    48Plan

    Samsung Kies before 2.5.0.12094_27_11 has arbitrary file execution.

    CriticalCVSS 9.8Proof of conceptEPSS 31%

    samsung · kiesJan 9, 2020

  • CVE-2023-21492
    48Plan

    Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.

    MediumCVSS 4.4KEVWeaponizedEPSS 2%

    samsung · androidMay 4, 2023

  • CVE-2021-25370
    47Plan

    An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to k

    MediumCVSS 4.4KEVWeaponizedEPSS 0%

    samsung · androidMar 26, 2021

  • CVE-2023-26497
    45Plan

    An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto

    CriticalCVSS 9.8No exploitEPSS 21%

    samsung · exynos modem 5300 firmwareMar 21, 2023

  • CVE-2023-26498
    45Plan

    An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos Auto T51

    CriticalCVSS 9.8No exploitEPSS 21%

    samsung · exynos modem 5300 firmwareMar 22, 2023

  • CVE-2023-26496
    45Plan

    An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto

    CriticalCVSS 9.8No exploitEPSS 21%

    samsung · exynos modem 5300 firmwareMar 22, 2023