Read the docs

Samsung

Records2044All Threatist records
Exploited (KEV)16In CISA KEV
CVSS critical180CVSS 9.0–10.0
CVSS high708CVSS 7.0–8.9

Exploited now

Samsung records in CISA KEV
TI-2024-06858 Samsung MagicINFO 9 Server Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-04-24TI-2025-15038 Samsung Mobile Devices Out-of-Bounds Write Vulnerability Priority CRITICAL 100KEV 2025-11-10TI-2025-15039 Samsung Mobile Devices Out-of-Bounds Write Vulnerability Priority CRITICAL 100KEV 2025-10-02TI-2025-04133 Samsung MagicINFO 9 Server Path Traversal Vulnerability Priority CRITICAL 100KEV 2025-05-22TI-2022-06595 Samsung Mobile Devices Use-After-Free Vulnerability Priority CRITICAL 93KEV 2023-09-18TI-2021-07610 Samsung Mobile Devices Unspecified Vulnerability Priority CRITICAL 89KEV 2023-06-29

Components

Products in the NVD configurations · select one to filter the records
Android 502 records CRITICAL Exynos 1380 Firmware 125 records MEDIUM Exynos 1280 Firmware 118 records HIGH Exynos 980 Firmware 114 records HIGH Exynos 1330 Firmware 99 records MEDIUM Exynos 1080 Firmware 97 records HIGH Exynos 850 Firmware 97 records HIGH Exynos 1480 Firmware 90 records MEDIUM

Records

9 records in Email · all components

TI-2023-14543 CVE-2023-30729 · GHSA-pxhr-2259-h82w

Improper certificate validation in Samsung Email

Priority LOW 37

Improper Certificate Validation in Samsung Email prior to version 6.1.82.0 allows remote attacker to intercept the network traffic including sensitive information.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00416 Published 2023-09-06 Fixed in 6.1.82.0 CWE-295
TI-2021-07614 CVE-2021-25375 · GHSA-25v9-5xh2-9q3m

Information disclosure in Samsung Email

Priority LOW 31

Using predictable index for attachments in Samsung Email prior to version 6.1.41.0 allows remote attackers to get attachments of another emails when users open the malicious attachment.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01243 Published 2021-04-09 Fixed in 6.1.41.0 CWE-200
TI-2021-07615 CVE-2021-25376 · GHSA-7vc5-w68f-5fg9

Information disclosure in Samsung Email

Priority LOW 26

An improper synchronization logic in Samsung Email prior to version 6.1.41.0 can leak messages in certain mailbox in plain text when STARTTLS negotiation is failed.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00814 Published 2021-04-09 Fixed in 6.1.41.0 CWE-200
TI-2023-22703 CVE-2023-42553 · GHSA-96x6-ppmq-j9wc

Incorrect authorization in Samsung Email

Priority LOW 24

Improper authorization verification vulnerability in Samsung Email prior to version 6.1.90.4 allows attackers to read sandbox data of email.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00379 Published 2023-11-07 Fixed in 6.1.90.4 CWE-863
Open these records in search →