CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 06/03/2025 |
| CVE-2025-20918 | ÉLEVÉE7.5 | Out-of-bounds read in applying extra data of base content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory. | 06/03/2025 |
| CVE-2025-20917 | ÉLEVÉE7.5 | Out-of-bounds read in applying binary of pdf content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory. | 06/03/2025 |
| CVE-2025-20916 | ÉLEVÉE7.5 | Out-of-bounds read in reading string of SPen in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory. | 06/03/2025 |
| CVE-2025-20915 | ÉLEVÉE7.5 | Out-of-bounds read in applying binary of voice content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory. | 06/03/2025 |
| CVE-2025-20914 | ÉLEVÉE7.5 | Out-of-bounds read in applying binary of hand writing content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory. | 06/03/2025 |
| CVE-2025-20913 | MOYENNE5.5 | Out-of-bounds read in applying binary of drawing content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory. | 06/03/2025 |
| CVE-2025-20901 | MOYENNE4.4 | Out-of-bounds read in Blockchain Keystore prior to version 1.3.16.5 allows local privileged attackers to read out-of-bounds memory. | 04/02/2025 |
| CVE-2025-20900 | MOYENNE4.4 | Out-of-bounds write in Blockchain Keystore prior to version 1.3.16.5 allows local privileged attackers to write out-of-bounds memory. | 04/02/2025 |
| CVE-2025-20898 | MOYENNE4.6 | Improper input validation in Samsung Members prior to version 5.2.00.12 allows physical attackers to access data across multiple user profiles. | 04/02/2025 |
| CVE-2025-20896 | MOYENNE5.5 | Use of implicit intent for sensitive communication in EasySetup prior to version 11.1.18 allows local attackers to access sensitive information. | 04/02/2025 |
| CVE-2025-20895 | MOYENNE4.6 | Authentication Bypass Using an Alternate Path in Galaxy Store prior to version 4.5.87.6 allows physical attackers to install arbitrary applications to bypass restrictions of Setupwizard. | 04/02/2025 |
| CVE-2025-20894 | MOYENNE4.6 | Improper access control in Samsung Email prior to version 6.1.97.1 allows physical attackers to access data across multiple user profiles. | 04/02/2025 |
| CVE-2024-53921 | FAIBLE2.8 | An issue was discovered in the installer in Samsung Magician 8.1.0 on Windows. An attacker can create arbitrary folders in the system permission directory via a symbolic link during the installation process. | 03/12/2024 |
| CVE-2024-49421 | MOYENNE4.3 | Path traversal in Quick Share Agent prior to version 3.5.14.47 in Android 12, 3.5.19.41 in Android 13, and 3.5.19.42 in Android 14 allows adjacent attackers to write file in arbitrary location. | 03/12/2024 |
| CVE-2024-49417 | FAIBLE3.3 | Use of implicit intent for sensitive communication in Smart Touch Call prior to 1.0.0.8 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability. | 03/12/2024 |
| CVE-2024-49416 | MOYENNE5.5 | Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to get sensitive information. | 03/12/2024 |