| CVE-2022-36869 | MOYENNE6.1 | Improper access control vulnerability in ContactsDumpActivity of?Contacts Provider prior to version 12.7.59 allows attacker to access the file without permission. | 09/09/2022 |
| CVE-2022-36867 | MOYENNE5.5 | Improper access control vulnerability in Editor Lite prior to version 4.0.40.14 allows attackers to access sensitive information. | 09/09/2022 |
| CVE-2022-36866 | FAIBLE3.3 | Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to identify the device. | 09/09/2022 |
| CVE-2022-36865 | FAIBLE3.3 | Improper access control in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to access device information. | 09/09/2022 |
| CVE-2022-36864 | ÉLEVÉE7.8 | Improper access control and intent redirection in Samsung Email prior to 6.1.70.20 allows attacker to access specific formatted file and execute privileged behavior. | 09/09/2022 |
| CVE-2022-36859 | MOYENNE4.8 | Improper input validation vulnerability in SmartTagPlugin prior to version 1.2.21-6 allows privileged attackers to trigger a XSS on a victim's devices. | 09/09/2022 |
| CVE-2022-36857 | FAIBLE2.4 | Improper Authorization vulnerability in Photo Editor prior to SMR Sep-2022 Release 1 allows physical attackers to read internal application data. | 09/09/2022 |
| CVE-2022-36851 | MOYENNE4.6 | Improper access control vulnerability in Samsung pass prior to version 4.0.03.1 allow physical attackers to access data of Samsung pass on a certain state of an unlocked device. | 09/09/2022 |
| CVE-2022-39830 | ÉLEVÉE7.5 | sign_pFwInfo in Samsung mTower through 0.3.0 has a missing check on the return value of EC_KEY_set_public_key_affine_coordinates, leading to a denial of service. | 05/09/2022 |
| CVE-2022-39829 | ÉLEVÉE7.5 | There is a NULL pointer dereference in aes256_encrypt in Samsung mTower through 0.3.0 due to a missing check on the return value of EVP_CIPHER_CTX_new. | 05/09/2022 |
| CVE-2022-39828 | ÉLEVÉE7.5 | sign_pFwInfo in Samsung mTower through 0.3.0 has a missing check on the return value of EC_KEY_set_private_key, leading to a denial of service. | 05/09/2022 |
| CVE-2022-36622 | ÉLEVÉE7.5 | Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_GetObjectInfo1. | 01/09/2022 |
| CVE-2022-36621 | ÉLEVÉE7.5 | Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_AllocateTransientObject. | 01/09/2022 |
| CVE-2022-38155 | ÉLEVÉE7.5 | TEE_Malloc in Samsung mTower through 0.3.0 allows a trusted application to achieve Excessive Memory Allocation via a large len value, as demonstrated by a Numaker-PFM-M2351 TEE kernel crash. | 11/08/2022 |
| CVE-2022-36840 | ÉLEVÉE7.8 | DLL hijacking vulnerability in Samsung Update Setup prior to version 2.2.9.50 allows attackers to execute arbitrary code. | 05/08/2022 |
| CVE-2022-36839 | MOYENNE5.5 | SQL injection vulnerability via IAPService in Samsung Checkout prior to version 5.0.53.1 allows attackers to access IAP information. | 05/08/2022 |
| CVE-2022-36838 | MOYENNE4.6 | Implicit Intent hijacking vulnerability in Galaxy Wearable prior to version 2.2.50 allows attacker to get sensitive information. | 05/08/2022 |
| CVE-2022-36837 | MOYENNE5.5 | Intent redirection vulnerability using implicit intent in Samsung email prior to version 6.1.70.20 allows attacker to get sensitive information. | 05/08/2022 |
| CVE-2022-36835 | FAIBLE3.3 | Implicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34 allows attackers to access arbitrary files. | 05/08/2022 |
| CVE-2022-36834 | MOYENNE5.0 | Exposure of Sensitive Information vulnerability in Game Launcher prior to version 6.0.07 allows local attacker to access app data with user interaction. | 05/08/2022 |