Read the docs

Samsung

Records2044All Threatist records
Exploited (KEV)16In CISA KEV
CVSS critical180CVSS 9.0–10.0
CVSS high708CVSS 7.0–8.9

Exploited now

Samsung records in CISA KEV
TI-2024-06858 Samsung MagicINFO 9 Server Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-04-24TI-2025-15038 Samsung Mobile Devices Out-of-Bounds Write Vulnerability Priority CRITICAL 100KEV 2025-11-10TI-2025-15039 Samsung Mobile Devices Out-of-Bounds Write Vulnerability Priority CRITICAL 100KEV 2025-10-02TI-2025-04133 Samsung MagicINFO 9 Server Path Traversal Vulnerability Priority CRITICAL 100KEV 2025-05-22TI-2022-06595 Samsung Mobile Devices Use-After-Free Vulnerability Priority CRITICAL 93KEV 2023-09-18TI-2021-07610 Samsung Mobile Devices Unspecified Vulnerability Priority CRITICAL 89KEV 2023-06-29

Components

Products in the NVD configurations · select one to filter the records
Android 502 records CRITICAL Exynos 1380 Firmware 125 records MEDIUM Exynos 1280 Firmware 118 records HIGH Exynos 980 Firmware 114 records HIGH Exynos 1330 Firmware 99 records MEDIUM Exynos 1080 Firmware 97 records HIGH Exynos 850 Firmware 97 records HIGH Exynos 1480 Firmware 90 records MEDIUM

Records

8 records in Gallery · all components

TI-2025-14964 CVE-2025-20968 · GHSA-w584-3vj6-7f7f

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android…

Priority MEDIUM 45

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows remote attackers to access data and perform internal operation…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00333 Published 2025-05-07 Fixed in 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13 +1
TI-2025-14963 CVE-2025-20967 · GHSA-j33m-6826-95m2

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android…

Priority LOW 39

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows attackers to read and write arbitrary file with the privilege…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00216 Published 2025-05-07 Fixed in 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13 +1
TI-2025-14965 CVE-2025-20969 · GHSA-g2w4-f56h-2wj6

Improper input validation in Samsung Gallery prior to version 14.5.10.3 in Global Android…

Priority LOW 24

Improper input validation in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows local attackers to access data within Samsung Gallery.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00158 Published 2025-05-07 Fixed in 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13 +1
TI-2023-14539 CVE-2023-30725 · GHSA-q9fw-58jw-47f2

Improper authentication in Samsung Gallery

Priority LOW 24

Improper authentication in LocalProvier of Gallery prior to version 14.5.01.2 allows attacker to access the data in content provider.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00171 Published 2023-09-06 Fixed in 14.5.01.2 CWE-287
TI-2025-14962 CVE-2025-20966 · GHSA-f3f4-3g45-5gh4

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android…

Priority LOW 21

Improper access control in Samsung Gallery prior to version 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13, and 15.5.04.5 in Android 14 allows physical attackers to access data across multiple user profile…

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00213 Published 2025-05-07 Fixed in 14.5.10.3 in Global Android 13, 14.5.09.3 in China Android 13 +1
TI-2023-14538 CVE-2023-30724 · GHSA-qg27-56wg-9vv3

Improper authentication in Samsung Gallery

Priority LOW 18

Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00173 Published 2023-09-06 Fixed in 14.5.01.2 CWE-287
Open these records in search →