Vulnerabilidades en Samsung

76 resultados
Análisis Vexday

Com 56 CVEs catalogadas, o perfil Samsung apresenta taxa de exploração ativa abaixo da média geral do catálogo — nenhuma entrada confirmada no CISA KEV —, o que sugere pressão operacional imediata relativamente contida. Ainda assim, 24 vulnerabilidades de severidade crítica representam uma superfície de ataque expressiva que exige atenção contínua de equipes de patch management. A falha mais prevalente é CWE-20 (validação inadequada de entrada), padrão que tende a viabilizar explorações encadeadas quando não corrigido sistematicamente. O maior EPSS observado (0,0593) pertence a CVE-2019-6742, indicando probabilidade de exploração ainda moderada para essa CVE específica; a existência de uma PoC pública no conjunto reforça a necessidade de priorizar a remediação das entradas críticas mesmo na ausência de exploração ativa confirmada.

CVE-2020-8860HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S10 Firmware G973FXXS3ASJA,EPSS 0.7%CVE-2018-3914HIGHAn exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the SamEPSS 0.4%CVE-2018-3906HIGHAn exploitable stack-based buffer overflow vulnerability exists in the retrieval of a database field in video-core's HTTP server of Samsung EPSS 0.4%CVE-2018-3915HIGHAn exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the SamEPSS 0.4%CVE-2018-3912HIGHOn Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts the fields from theEPSS 0.4%CVE-2018-3916HIGHAn exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the SamEPSS 0.4%CVE-2018-10498—This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Samsung Email Fixed in version 5.EPSS 0.4%CVE-2019-6744MEDIUMThis vulnerability allows local attackers to disclose sensitive information on affected installations of Samsung Knox 1.2.02.39 on Samsung GEPSS 0.4%CVE-2022-1230LOWThis vulnerability allows local attackers to execute arbitrary code on affected installations of Samsung Galaxy S21 prior to 4.5.40.5 phonesEPSS 0.4%CVE-2017-3218—Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.0, Samsung Magician uses HTTP EPSS 0.3%CVE-2018-10497—This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Email Fixed in version 5.0.02.16. AnEPSS 0.3%CVE-2018-10499—This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy Apps Fixed in version 6.4.EPSS 0.3%CVE-2018-10501—This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Notes Fixed in version 2.0.02.31. AnEPSS 0.3%CVE-2018-10502—This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Galaxy Apps Fixed in version 4.2.18.EPSS 0.3%CVE-2018-10500—This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Galaxy Apps Fixed in version 6.4.0.1EPSS 0.2%CVE-2026-33970LOWAn issue was discovered in NR RRC and L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 850, 1080, 2100, 1280, 2200, 1330EPSS 0.2%CVE-2026-23793LOWAn issue was discovered in Samsung Mobile Processor Exynos 1330, 1380, 1480, and 2400. An out-of-bounds memory access vulnerability in the cEPSS 0.2%CVE-2024-32670HIGHExposure of Sensitive Information to an Unauthorized Actor in Samsung Galaxy SmartTag2 prior to 0.20.04 allows attackes to potentially identEPSS 0.2%CVE-2024-53922MEDIUMAn issue was discovered in the buffer queue driver in Samsung Automotive Processor Exynos Auto 8890, V7, V9, and V920. Lack of a length checEPSS 0.2%CVE-2026-23792MEDIUMAn issue was discovered in NR RRC in Samsung Mobile Processor and Modem Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, WEPSS 0.1%