Vulnerabilidades em Samsung Mobile

1.391 resultados
Análise Vexday

Samsung Mobile acumula 1.316 CVEs catalogadas, com 13 confirmadas em exploração ativa pelo CISA KEV — uma taxa 2,2 vezes acima da média geral do catálogo, o que indica exposição operacional relevante e exige atenção prioritária na gestão de patches. O tipo de falha mais recorrente é CWE-20 (validação inadequada de entrada), sugerindo fragilidades sistemáticas no tratamento de dados externos que tendem a gerar superfícies amplas de ataque. A CVE mais perigosa em exploração ativa no momento é CVE-2025-21042, com escore EPSS de 0,1161, enquanto 34 novas vulnerabilidades surgiram nos últimos 90 dias, sinalizando um ritmo de descoberta contínuo que demanda monitoramento frequente. Com apenas 3 CVEs acompanhadas de PoC pública e EPSS máximo observado de 0,1289, o risco de exploração massiva imediata é moderado, mas a combinação de falhas ativas confirmadas e volume crescente de novas entradas justifica ciclos curtos de atualização de firmware em ambientes corporativos.

CVE-2023-21518MEDIUMImproper access control vulnerability in SearchWidget prior to version 3.3 in China models allows untrusted applications to start arbitrary EPSS 0.2%CVE-2021-25377LOWIntent redirection in Samsung Experience Service versions 10.8.0.4 in Android P(9.0) below, and 12.2.0.5 in Android Q(10.0) above allows attEPSS 0.2%CVE-2022-28789MEDIUMUnprotected activities in Voice Note prior to version 21.3.51.11 allows attackers to record voice without user interaction. The patch adds pEPSS 0.2%CVE-2022-28790MEDIUMImproper authentication in Link to Windows Service prior to version 2.3.04.1 allows attacker to lock the device. The patch adds proper calleEPSS 0.2%CVE-2024-20877HIGHHeap out-of-bound write vulnerability in parsing grid image header in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers tEPSS 0.2%CVE-2023-42534MEDIUMImproper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files wiEPSS 0.2%CVE-2025-20892MEDIUMProtection Mechanism Failure in bootloader prior to SMR Jan-2025 Release 1 allows physical attackers to allow to execute fastboot command. UEPSS 0.2%CVE-2024-49407MEDIUMImproper access control in Samsung Flow prior to version 4.9.15.7 allows physical attackers to access data across multiple user profiles.EPSS 0.2%CVE-2024-49403MEDIUMImproper access control in Samsung Voice Recorder prior to version 21.5.40.37 allows physical attackers to access recording files on the locEPSS 0.2%CVE-2024-34674MEDIUMImproper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles.EPSS 0.2%CVE-2024-20878HIGHHeap out-of-bound write vulnerability in parsing grid image in libsavscmn.so prior to SMR June-2024 Release 1 allows local attackers to execEPSS 0.2%CVE-2024-34645MEDIUMImproper input validation in ThemeCenter prior to SMR Sep-2024 Release 1 allows physical attackers to install privileged applications.EPSS 0.2%CVE-2022-25823LOWInformation Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.220126741 allows attackers to access user information in lEPSS 0.2%CVE-2026-21060MEDIUMImproper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user EPSS 0.2%CVE-2026-21070MEDIUMImproper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information.EPSS 0.2%CVE-2023-42569MEDIUMImproper authorization verification vulnerability in AR Emoji prior to SMR Dec-2023 Release 1 allows attackers to read sandbox data of AR EmEPSS 0.2%CVE-2022-25829LOWInformation Exposure vulnerability in Watch Active2 Plugin prior to version 2.2.08.22012751 allows attacker to access password information oEPSS 0.2%CVE-2022-25826LOWInformation Exposure vulnerability in Galaxy S3 Plugin prior to version 2.2.03.22012751 allows attacker to access password information of coEPSS 0.2%CVE-2023-21431LOWImproper input validation in Bixby Vision prior to version 3.7.70.17 allows attacker to access data of Bixby Vision.EPSS 0.2%CVE-2024-34660HIGHHeap-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code.EPSS 0.2%