| CVE-2022-30744 | ALTO7.8 | DLL hijacking vulnerability in KiesWrapper in Samsung Kies prior to version 2.6.4.22043_1 allows attacker to execute arbitrary code. | 07/06/2022 |
| CVE-2022-30743 | MÉDIO5.3 | Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission. | 07/06/2022 |
| CVE-2022-30742 | BAIXO3.3 | Sensitive information exposure vulnerability in FmmExtraOperation of Find My Mobile prior to 7.2.24.12 allows local attackers with log access permissio to get sim card information through device log. | 07/06/2022 |
| CVE-2022-30741 | BAIXO3.3 | Sensitive information exposure vulnerability in SimChangeAlertManger of Find My Mobile prior to 7.2.24.12 allows local attackers with log access permission to get sim card information through device log. | 07/06/2022 |
| CVE-2022-30740 | MÉDIO4.3 | Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored credit card numbers. | 07/06/2022 |
| CVE-2022-30739 | MÉDIO4.3 | Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get an user email or phone number with a normal level permission. | 07/06/2022 |
| CVE-2022-30738 | MÉDIO4.3 | Improper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof address bar via executing script. | 07/06/2022 |
| CVE-2022-30737 | MÉDIO5.3 | Implicit Intent hijacking vulnerability in Samsung Account prior to version 13.2.00.6 allows attackers to get email ID. | 07/06/2022 |
| CVE-2022-30736 | MÉDIO5.3 | Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission. | 07/06/2022 |
| CVE-2022-30735 | ALTO7.5 | Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the access_token without permission. | 07/06/2022 |
| CVE-2022-30734 | MÉDIO5.3 | Sensitive information exposure in Sign-out log in Samsung Account prior to version 13.2.00.6 allows attackers to get an user email or phone number without permission. | 07/06/2022 |
| CVE-2022-30733 | MÉDIO5.3 | Sensitive information exposure in Sign-in log in Samsung Account prior to version 13.2.00.6 allows attackers to get an user email or phone number without permission. | 07/06/2022 |
| CVE-2022-30732 | ALTO7.5 | Exposure of Sensitive Information vulnerability in Samsung Account prior to version 13.2.00.6 allows attacker to access sensitive information via onActivityResult. | 07/06/2022 |
| CVE-2022-30731 | MÉDIO5.5 | Improper access control vulnerability in My Files prior to version 13.1.00.193 allows attackers to access arbitrary private files in My Files application. | 07/06/2022 |
| CVE-2022-30730 | MÉDIO4.6 | Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication. | 07/06/2022 |
| CVE-2022-28792 | ALTO7.8 | DLL hijacking vulnerability in Gear IconX PC Manager prior to version 2.1.220405.51 allows attacker to execute arbitrary code. The patch adds proper absolute path to prevent dll hijacking. | 03/05/2022 |
| CVE-2022-28791 | MÉDIO5.5 | Improper input validation vulnerability in InstallAgent in Galaxy Store prior to version 4.5.41.8 allows attacker to overwrite files stored in a specific path. The patch adds proper protection to prevent overwrite to existing files. | 03/05/2022 |
| CVE-2022-28790 | BAIXO3.3 | Improper authentication in Link to Windows Service prior to version 2.3.04.1 allows attacker to lock the device. The patch adds proper caller signature check logic. | 03/05/2022 |
| CVE-2022-28789 | MÉDIO5.5 | Unprotected activities in Voice Note prior to version 21.3.51.11 allows attackers to record voice without user interaction. The patch adds proper permission for vulnerable activities. | 03/05/2022 |
| CVE-2022-28779 | ALTO7.8 | Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code. | 11/04/2022 |