Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (135 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-21027 1 Samsung 3 Android, Mobile, Samsung Mobile 2025-09-11 5.1 Medium
Improper verification of intent by broadcast receiver in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to temporarily disable the SIM.
CVE-2025-21025 2 Google, Samsung 4 Android, Android, Mobile and 1 more 2025-09-11 5.1 Medium
Improper access control in MARsExemptionManager prior to SMR Sep-2025 Release 1 allows local attackers to be excluded from background execution management.
CVE-2023-21466 2 Google, Samsung 4 Android, Android, Mobile and 1 more 2025-09-08 5.3 Medium
PendingIntent hijacking vulnerability in CertificatePolicy in framework prior to SMR Apr-2023 Release 1 allows local attackers to access contentProvider without proper permission.
CVE-2023-21467 1 Samsung 3 Exynos, Mobile, Samsung Mobile 2025-09-08 4.6 Medium
Error in 3GPP specification implementation in Exynos baseband prior to SMR Apr-2023 Release 1 allows incorrect handling of unencrypted message.
CVE-2025-32100 1 Samsung 42 Exynos, Exynos 1080, Exynos 1080 Firmware and 39 more 2025-09-05 6.5 Medium
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. A programming mistake for buffer copy leads to out-of-bounds writes via malformed ROHC packets.
CVE-2023-21471 1 Samsung 3 Android, Mobile, Samsung Mobile 2025-09-05 4 Medium
Improper access control vulnerability in SemClipboard prior to SMR Apr-2023 Release 1 allows attackers to read arbitrary files with system permission.
CVE-2023-21472 1 Samsung 4 Android, Exynos, Mobile and 1 more 2025-09-05 6.8 Medium
Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader.
CVE-2023-21473 1 Samsung 4 Android, Exynos, Mobile and 1 more 2025-09-05 6.8 Medium
Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader.
CVE-2025-20990 1 Samsung 4 Android, Mobile, Samsung Mobile and 1 more 2025-08-12 4 Medium
Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access device identifier.
CVE-2025-21002 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2025-07-16 6.2 Medium
Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to manipulate broadcasting Auracast.
CVE-2025-21003 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2025-07-16 4 Medium
Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows local attackers to access sensitive information.
CVE-2025-20999 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2025-07-14 4.1 Medium
Improper authorization in accessing saved Wi-Fi password for Galaxy Tablet prior to SMR Jul-2025 Release 1 allows secondary users to access owner's saved Wi-Fi password.
CVE-2025-21001 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2025-07-14 6.2 Medium
Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to stop broadcasting Auracast.
CVE-2015-7895 1 Samsung 2 Galaxy S6, Samsung Mobile 2025-04-20 N/A
Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).
CVE-2015-7896 1 Samsung 2 Galaxy S6, Samsung Mobile 2025-04-20 N/A
LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service (memory corruption and SIGSEGV) via a crafted image file.
CVE-2015-7898 1 Samsung 2 Galaxy S6, Samsung Mobile 2025-04-20 N/A
Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).
CVE-2016-4547 1 Samsung 1 Samsung Mobile 2025-04-20 N/A
Samsung devices with Android KK(4.4), L(5.0/5.1), or M(6.0) allow attackers to cause a denial of service (system crash) via a crafted system call to TvoutService_C.
CVE-2017-7978 1 Samsung 1 Samsung Mobile 2025-04-20 N/A
Samsung Android devices with L(5.0/5.1), M(6.0), and N(7.x) software allow attackers to obtain sensitive information by reading a world-readable log file after an unexpected reboot. The Samsung ID is SVE-2017-8290.
CVE-2016-4546 1 Samsung 1 Samsung Mobile 2025-04-20 N/A
Samsung devices with Android KK(4.4) or L(5.0/5.1) allow local users to cause a denial of service (IAndroidShm service crash) via crafted data in a service call.
CVE-2017-5351 1 Samsung 1 Samsung Mobile 2025-04-20 N/A
Samsung Note devices with KK(4.4), L(5.0/5.1), and M(6.0) software allow attackers to crash the system by creating an arbitrarily large number of active VR service threads. The Samsung ID is SVE-2016-7650.