| CVE-2022-28778 | BAJO3.3 | Improper access control vulnerability in Samsung Security Supporter prior to version 1.2.40.0 allows attacker to set the arbitrary folder as Secret Folder without Samsung Security Supporter permission | 11/04/2022 |
| CVE-2022-28777 | BAJO3.3 | Improper access control vulnerability in Samsung Members prior to version 13.6.08.5 allows local attacker to execute call function without CALL_PHONE permission. | 11/04/2022 |
| CVE-2022-28776 | ALTO7.8 | Improper access control vulnerability in Galaxy Store prior to version 4.5.36.4 allows attacker to install applications from Galaxy Store without user interactions. | 11/04/2022 |
| CVE-2022-28775 | BAJO3.3 | Improper access control vulnerability in Samsung Flow prior to version 4.8.06.5 allows attacker to write the file without Samsung Flow permission. | 11/04/2022 |
| CVE-2022-28544 | MEDIO5.5 | Path traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to version 4.5.40.5 allows attacker to access the file of Galaxy store. | 11/04/2022 |
| CVE-2022-28543 | MEDIO5.5 | Path traversal vulnerability in Samsung Flow prior to version 4.8.07.4 allows local attackers to read arbitrary files as Samsung Flow permission. | 11/04/2022 |
| CVE-2022-28542 | MEDIO5.5 | Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access privileged content providers as Galaxy Store permission. | 11/04/2022 |
| CVE-2022-28541 | ALTO7.8 | Uncontrolled search path element vulnerability in Samsung Update prior to version 3.0.77.0 allows attackers to execute arbitrary code as Samsung Update permission. | 11/04/2022 |
| CVE-2022-27843 | ALTO7.8 | DLL hijacking vulnerability in Kies prior to version 2.6.4.22014_2 allows attacker to execute abitrary code. | 11/04/2022 |
| CVE-2022-27842 | ALTO7.8 | DLL hijacking vulnerability in Smart Switch PC prior to version 4.2.22022_4 allows attacker to execute abitrary code. | 11/04/2022 |
| CVE-2022-27841 | MEDIO4.3 | Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that is previously running without authentication | 11/04/2022 |
| CVE-2022-27840 | MEDIO4.4 | Improper access control vulnerability in SamsungRecovery prior to version 8.1.43.0 allows local attckers to delete arbitrary files as SamsungRecovery permission. | 11/04/2022 |
| CVE-2022-27839 | MEDIO4.0 | Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab without proper credentials. | 11/04/2022 |
| CVE-2022-27838 | ALTO7.8 | Improper access control vulnerability in FactoryCamera prior to version 2.1.96 allows attacker to access the file with system privilege. | 11/04/2022 |
| CVE-2022-27837 | ALTO7.8 | A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R(11.0) and 13.0.1.1 in Android S(12.0) allows attacker to access the file with system privilege. | 11/04/2022 |
| CVE-2022-25830 | BAJO3.3 | Information Exposure vulnerability in Galaxy Watch3 Plugin prior to version 2.2.09.22012751 allows attacker to access password information of connected WiFiAp in the log | 10/03/2022 |
| CVE-2022-25829 | BAJO3.3 | Information Exposure vulnerability in Watch Active2 Plugin prior to version 2.2.08.22012751 allows attacker to access password information of connected WiFiAp in the log | 10/03/2022 |
| CVE-2022-25828 | BAJO3.3 | Information Exposure vulnerability in Watch Active Plugin prior to version 2.2.07.22012751 allows attacker to access password information of connected WiFiAp in the log | 10/03/2022 |
| CVE-2022-25827 | BAJO3.3 | Information Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.22012751 allows attacker to access password information of connected WiFiAp in the log | 10/03/2022 |
| CVE-2022-25826 | BAJO3.3 | Information Exposure vulnerability in Galaxy S3 Plugin prior to version 2.2.03.22012751 allows attacker to access password information of connected WiFiAp in the log | 10/03/2022 |