Filtered by vendor Samsung Subscriptions
Filtered by product Mobile Subscriptions
Total 68 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-34598 1 Samsung 3 Goodlock, Mobile, Samsung Mobile 2025-09-05 7.7 High
Improper export of component in GoodLock prior to version 2.2.04.95 allows local attackers to install arbitrary applications from Galaxy Store.
CVE-2022-39888 1 Samsung 3 Mobile, Samsung Mobile, Samsung Mobile Devices 2025-09-05 4.3 Medium
Improper access control vulnerability in retrieveExternalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local attacker to access to Proxy information.
CVE-2023-21479 2 Google, Samsung 4 Android, Mobile, Samsung Mobile and 1 more 2025-09-04 5.3 Medium
Improper authorization in Smart suggestions prior to SMR Apr-2023 Release 1 in Android 13 and 4.1.01.0 in Android 12 allows remote attackers to register a schedule.
CVE-2025-21030 2 Google, Samsung 3 Android, Mobile, Samsung Mobile 2025-09-04 4.3 Medium
Improper handling of insufficient permission in AppPrelaunchManagerService prior to SMR Sep-2025 Release 1 in Chinese Android 15 allows local attackers to execute arbitrary application in the background.
CVE-2023-21477 1 Samsung 2 Mobile, Samsung Mobile 2025-09-04 7.9 High
Access of Memory Location After End of Buffer vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data.
CVE-2025-20990 1 Samsung 4 Android, Mobile, Samsung Mobile and 1 more 2025-08-12 4 Medium
Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access device identifier.
CVE-2025-20983 1 Samsung 2 Android, Mobile 2025-07-14 6.4 Medium
Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVE-2014-8346 1 Samsung 2 Findmymobile, Mobile 2025-04-12 N/A
The Remote Controls feature on Samsung mobile devices does not validate the source of lock-code data received over a network, which makes it easier for remote attackers to cause a denial of service (screen locking with an arbitrary code) by triggering unexpected Find My Mobile network traffic.