Read the docs

Samsung

Records2044All Threatist records
Exploited (KEV)16In CISA KEV
CVSS critical180CVSS 9.0–10.0
CVSS high708CVSS 7.0–8.9

Exploited now

Samsung records in CISA KEV
TI-2024-06858 Samsung MagicINFO 9 Server Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-04-24TI-2025-15038 Samsung Mobile Devices Out-of-Bounds Write Vulnerability Priority CRITICAL 100KEV 2025-11-10TI-2025-15039 Samsung Mobile Devices Out-of-Bounds Write Vulnerability Priority CRITICAL 100KEV 2025-10-02TI-2025-04133 Samsung MagicINFO 9 Server Path Traversal Vulnerability Priority CRITICAL 100KEV 2025-05-22TI-2022-06595 Samsung Mobile Devices Use-After-Free Vulnerability Priority CRITICAL 93KEV 2023-09-18TI-2021-07610 Samsung Mobile Devices Unspecified Vulnerability Priority CRITICAL 89KEV 2023-06-29

Components

Products in the NVD configurations · select one to filter the records
Android 502 records CRITICAL Exynos 1380 Firmware 125 records MEDIUM Exynos 1280 Firmware 118 records HIGH Exynos 980 Firmware 114 records HIGH Exynos 1330 Firmware 99 records MEDIUM Exynos 1080 Firmware 97 records HIGH Exynos 850 Firmware 97 records HIGH Exynos 1480 Firmware 90 records MEDIUM

Records

10 records in Pass · all components

TI-2022-18886 CVE-2022-39892 · GHSA-94xf-rr59-hc9c

Improper authentication in Samsung Pass

Priority MEDIUM 43

Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00476 Published 2022-11-09 Fixed in 4.0.05.1 CWE-287
TI-2023-22726 CVE-2023-42576 · GHSA-vw28-3j9w-9mch

Improper authentication in Samsung Pass

Priority LOW 32

Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid exception handler.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.0038 Published 2023-12-05 Fixed in 4.3.00.17 CWE-287
TI-2023-22725 CVE-2023-42575 · GHSA-xf3p-q42r-rwgf

Incorrect authorization in Samsung Pass

Priority LOW 32

Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid flag setting.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.0038 Published 2023-12-05 Fixed in 4.3.00.17 CWE-863
TI-2023-22704 CVE-2023-42554 · GHSA-v5h3-wx8w-wpmx

Improper authentication in Samsung Pass

Priority LOW 32

Improper Authentication vulnerabiity in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.0034 Published 2023-11-07 Fixed in 4.3.00.17 CWE-287
TI-2023-14489 CVE-2023-30675 · GHSA-vgxr-5gfw-xp36

Improper authentication in Samsung Pass

Priority LOW 27

Improper authentication in Samsung Pass prior to version 4.2.03.1 allows local attacker to access stored account information when Samsung Wallet is not installed.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00162 Published 2023-07-06 Fixed in 4.2.03.1 CWE-287
TI-2022-18904 CVE-2022-39910 · GHSA-jj68-3qxc-xvjv

Improper access control in Samsung Pass

Priority LOW 19

Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data of Samsung Pass on a certain state of an unlocked device using pop-up view.

CVSS 3.1MEDIUM 4.2 Physical No auth No interaction EPSS 0.00272 Published 2022-12-08 Fixed in 4.0.06.7 CWE-284
Open these records in search →