Samsung kayıtları
samsung üreticisine ait 1.689 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 16 · %0,9
- Silahlaştırılmış
- 20 · %1,2
- Pre-auth RCE
- 84
- Düzeltme kaydı olan
- %2,3
- Yayından KEV’e ortanca
- 618 gün
Tekrar eden sınıflar
- CWE-787 Out-of-bounds Write213
- CWE-284 Improper Access Control193
- CWE-20 Improper Input Validation161
- CWE-125 Out-of-bounds Read97
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor66
- CWE-285 Improper Authorization63
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
1.689 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
97Hemen | CVE-2024-7399Silahlaştırılmış | Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attacksamsung · magicinfo 9 server · CWE-22 | Kritik9,8 | KEV | %91,9 | 12 Ağu 2024 |
79Bu hafta | CVE-2025-21042Silahlaştırılmış | Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.samsung · android · CWE-787 | Kritik9,8 | KEV | %33,2 | 12 Eyl 2025 |
76Bu hafta | CVE-2025-4632Silahlaştırılmış | Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attacksamsung · magicinfo 9 server · CWE-22 | Kritik9,8 | KEV | %24,1 | 13 May 2025 |
71Bu hafta | CVE-2016-1010Silahlaştırılmış | Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577adobe · flash player · CWE-190 | Yüksek8,8 | KEV | %19,3 | 12 Mar 2016 |
70Bu hafta | CVE-2025-21043Silahlaştırılmış | Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.samsung · android · CWE-787 | Kritik9,8 | KEV | %2,1 | 12 Eyl 2025 |
61Bu hafta | CVE-2021-25487Silahlaştırılmış | Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it ressamsung · android · CWE-125 | Yüksek7,8 | KEV | %0,6 | 6 Eki 2021 |
61Bu hafta | CVE-2022-22265Silahlaştırılmış | An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and codegoogle · android · CWE-703 | Yüksek7,8 | KEV | %0,4 | 10 Oca 2022 |
59Planlayın | CVE-2021-25337Silahlaştırılmış | Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to readsamsung · android · CWE-269 | Yüksek7,1 | KEV | %2,8 | 4 Mar 2021 |
58Planlayın | CVE-2012-4333Silahlaştırılmış | Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0 ActiveX controls insamsung · net-i viewer · CWE-119 | Kritik10,0 | — | %59,6 | 14 Ağu 2012 |
56Planlayın | CVE-2021-25372Silahlaştırılmış | An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.samsung · android · CWE-787 | Orta6,7 | KEV | %0,8 | 26 Mar 2021 |
56Planlayın | CVE-2021-25371Silahlaştırılmış | A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.samsung · android · CWE-912 | Orta6,7 | KEV | %0,8 | 26 Mar 2021 |
55Planlayın | CVE-2021-25394Silahlaştırılmış | A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radiosamsung · android · CWE-416 | Orta6,4 | KEV | %0,4 | 11 Haz 2021 |
55Planlayın | CVE-2021-25395Silahlaştırılmış | A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilsamsung · android · CWE-362 | Orta6,4 | KEV | %0,4 | 11 Haz 2021 |
54Planlayın | CVE-2017-17692Silahlaştırılmış | Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted Javasamsung · internet browser · CWE-200 | Yüksek7,5 | — | %78,8 | 21 Ara 2017 |
52Planlayın | CVE-2021-25369Silahlaştırılmış | An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.samsung · android · CWE-200 | Orta5,5 | KEV | %1,1 | 26 Mar 2021 |
52Planlayın | CVE-2021-25489Silahlaştırılmış | Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format stsamsung · android · CWE-20 | Orta5,5 | KEV | %0,5 | 6 Eki 2021 |
49Planlayın | CVE-2015-8279Silahlaştırılmış | Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to read arbitrary files via a request to an unspecified PHP scriptsamsung · web viewer · CWE-264 | Yüksek8,6 | — | %51,4 | 14 Oca 2016 |
49Planlayın | CVE-2023-24033İstismar yok | The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets do not properly checsamsung · exynos modem 5300 firmware · CWE-20 | Kritik9,8 | — | %32,9 | 13 Mar 2023 |
48Planlayın | CVE-2012-3807Kavram kanıtı | Samsung Kies before 2.5.0.12094_27_11 has arbitrary file execution.samsung · kies | Kritik9,8 | — | %31,6 | 9 Oca 2020 |
48Planlayın | CVE-2023-21492Silahlaştırılmış | Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.samsung · android · CWE-532 | Orta4,4 | KEV | %2,6 | 4 May 2023 |
47Planlayın | CVE-2021-25370Silahlaştırılmış | An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to ksamsung · android · CWE-416 | Orta4,4 | KEV | %0,9 | 26 Mar 2021 |
46Planlayın | CVE-2025-54453İstismar yok | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allowsamsung · magicinfo 9 server · CWE-22 | Kritik9,8 | — | %23,8 | 23 Tem 2025 |
45Planlayın | CVE-2023-26497İstismar yok | An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Autosamsung · exynos modem 5300 firmware · CWE-787 | Kritik9,8 | — | %21,4 | 21 Mar 2023 |
45Planlayın | CVE-2023-26496İstismar yok | An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Autosamsung · exynos modem 5300 firmware · CWE-787 | Kritik9,8 | — | %21,4 | 22 Mar 2023 |
45Planlayın | CVE-2023-26498İstismar yok | An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos Auto T51samsung · exynos modem 5300 firmware · CWE-787 | Kritik9,8 | — | %21,4 | 22 Mar 2023 |
- CVE-2024-739997Hemen
Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attack
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %92samsung · magicinfo 9 server12 Ağu 2024
- CVE-2025-2104279Bu hafta
Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %33samsung · android12 Eyl 2025
- CVE-2025-463276Bu hafta
Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attack
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %24samsung · magicinfo 9 server13 May 2025
- CVE-2016-101071Bu hafta
Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %19adobe · flash player12 Mar 2016
- CVE-2025-2104370Bu hafta
Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %2samsung · android12 Eyl 2025
- CVE-2021-2548761Bu hafta
Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it res
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1samsung · android6 Eki 2021
- CVE-2022-2226561Bu hafta
An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %0google · android10 Oca 2022
- CVE-2021-2533759Planlayın
Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read
YüksekCVSS 7,1KEVSilahlaştırılmışEPSS %3samsung · android4 Mar 2021
- CVE-2012-433358Planlayın
Multiple stack-based buffer overflows in the BackupToAvi method in the (1) UMS_Ctrl 1.5.1.1 and (2) UMS_Ctrl_STW 2.0.1.0 ActiveX controls in
KritikCVSS 10,0SilahlaştırılmışEPSS %60samsung · net-i viewer14 Ağu 2012
- CVE-2021-2537256Planlayın
An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.
OrtaCVSS 6,7KEVSilahlaştırılmışEPSS %1samsung · android26 Mar 2021
- CVE-2021-2537156Planlayın
A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.
OrtaCVSS 6,7KEVSilahlaştırılmışEPSS %1samsung · android26 Mar 2021
- CVE-2021-2539455Planlayın
A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio
OrtaCVSS 6,4KEVSilahlaştırılmışEPSS %0samsung · android11 Haz 2021
- CVE-2021-2539555Planlayın
A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privil
OrtaCVSS 6,4KEVSilahlaştırılmışEPSS %0samsung · android11 Haz 2021
- CVE-2017-1769254Planlayın
Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted Java
YüksekCVSS 7,5SilahlaştırılmışEPSS %79samsung · internet browser21 Ara 2017
- CVE-2021-2536952Planlayın
An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.
OrtaCVSS 5,5KEVSilahlaştırılmışEPSS %1samsung · android26 Mar 2021
- CVE-2021-2548952Planlayın
Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format st
OrtaCVSS 5,5KEVSilahlaştırılmışEPSS %1samsung · android6 Eki 2021
- CVE-2015-827949Planlayın
Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to read arbitrary files via a request to an unspecified PHP script
YüksekCVSS 8,6SilahlaştırılmışEPSS %51samsung · web viewer14 Oca 2016
- CVE-2023-2403349Planlayın
The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets do not properly chec
KritikCVSS 9,8İstismar yokEPSS %33samsung · exynos modem 5300 firmware13 Mar 2023
- CVE-2012-380748Planlayın
Samsung Kies before 2.5.0.12094_27_11 has arbitrary file execution.
KritikCVSS 9,8Kavram kanıtıEPSS %32samsung · kies9 Oca 2020
- CVE-2023-2149248Planlayın
Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.
OrtaCVSS 4,4KEVSilahlaştırılmışEPSS %3samsung · android4 May 2023
- CVE-2021-2537047Planlayın
An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to k
OrtaCVSS 4,4KEVSilahlaştırılmışEPSS %1samsung · android26 Mar 2021
- CVE-2025-5445346Planlayın
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samsung Electronics MagicINFO 9 Server allow
KritikCVSS 9,8İstismar yokEPSS %24samsung · magicinfo 9 server23 Tem 2025
- CVE-2023-2649745Planlayın
An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto
KritikCVSS 9,8İstismar yokEPSS %21samsung · exynos modem 5300 firmware21 Mar 2023
- CVE-2023-2649645Planlayın
An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto
KritikCVSS 9,8İstismar yokEPSS %21samsung · exynos modem 5300 firmware22 Mar 2023
- CVE-2023-2649845Planlayın
An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos Auto T51
KritikCVSS 9,8İstismar yokEPSS %21samsung · exynos modem 5300 firmware22 Mar 2023