| CVE-2021-25493 | 높음7.1 | Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read | 06/10/2021 |
| CVE-2021-25492 | 높음7.1 | Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read. | 06/10/2021 |
| CVE-2021-25466 | 보통5.9 | Improper scheme check vulnerability in Samsung Internet prior to version 15.0.2.47 allows attackers to perform Man-in-the-middle attack and obtain Samsung Account token. | 09/09/2021 |
| CVE-2021-25465 | 높음7.0 | An improper scheme check vulnerability in Samsung Themes prior to version 5.2.01 allows attackers to perform Man-in-the-middle attack. | 09/09/2021 |
| CVE-2021-25464 | 보통5.5 | An improper file management vulnerability in SamsungCapture prior to version 4.8.02 allows sensitive information leak. | 09/09/2021 |
| CVE-2021-25463 | 낮음3.3 | Improper access control vulnerability in PENUP prior to version 3.8.00.18 allows arbitrary webpage loading in webview. | 09/09/2021 |
| CVE-2021-39373 | 높음7.8 | Samsung Drive Manager 2.0.104 on Samsung H3 devices allows attackers to bypass intended access controls on disk management. WideCharToMultiByte, WideCharStr, and MultiByteStr can contribute to password exposure. | 01/09/2021 |
| CVE-2021-25448 | 보통5.3 | Improper access control vulnerability in Smart Touch Call prior to version 1.0.0.5 allows arbitrary webpage loading in webview. | 05/08/2021 |
| CVE-2021-25445 | 보통5.3 | Unprotected component vulnerability in Samsung Internet prior to version 14.2 allows untrusted application to access internal files in Samsung Internet. | 05/08/2021 |
| CVE-2021-25442 | 높음7.5 | Improper MDM policy management vulnerability in KME module prior to KCS version 1.39 allows MDM users to bypass Knox Manage authentication. | 08/07/2021 |
| CVE-2021-25441 | 높음7.8 | Improper input validation vulnerability in AR Emoji Editor prior to version 4.4.03.5 in Android Q(10.0) and above allows untrusted applications to access arbitrary files with an escalated privilege. | 08/07/2021 |
| CVE-2021-25440 | 높음7.8 | Improper access control vulnerability in FactoryCameraFB prior to version 3.4.74 allows untrusted applications to access arbitrary files with an escalated privilege. | 08/07/2021 |
| CVE-2021-25439 | 낮음3.3 | Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to cause arbitrary webpage loading in webview. | 08/07/2021 |
| CVE-2021-25438 | 높음7.8 | Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to cause local file inclusion in webview. | 08/07/2021 |
| CVE-2021-25432 | 낮음3.3 | Information exposure vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to access chat data. | 08/07/2021 |
| CVE-2021-25431 | 보통5.5 | Improper access control vulnerability in Cameralyzer prior to versions 3.2.1041 in 3.2.x, 3.3.1040 in 3.3.x, and 3.4.4210 in 3.4.x allows untrusted applications to access some functions of Cameralyzer. | 08/07/2021 |
| CVE-2021-25425 | 보통5.3 | Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to read internal cache data via exported component. | 11/06/2021 |
| CVE-2021-25423 | 보통5.5 | Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone via log. | 11/06/2021 |
| CVE-2021-25422 | 보통5.5 | Improper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log. | 11/06/2021 |
| CVE-2021-25421 | 보통5.5 | Improper log management vulnerability in Galaxy Watch3 PlugIn prior to version 2.2.09.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log. | 11/06/2021 |