Samsung Mobile Samsung Members vulnerabilities

8 vulnerabilities

Known vulnerabilities in Samsung Mobile Samsung Members, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4CVE-2021-25343samsung mobilesamsung members+1
EPSS score
0.22%
Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions including denial of service attack by hijacking the provider.7.8CVE-2021-25438samsung mobilesamsung members+1
EPSS score
1.71%
Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to cause local file inclusion in webview.3.3CVE-2021-25432samsung mobilesamsung members+1
EPSS score
0.23%
Information exposure vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to access chat data.8.6CVE-2021-25374samsung mobilesamsung members+1
EPSS score
3.07%
An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in Android O(8.1) and below, and 3.9.00.9 in Android P(9.0) and above allows remote attackers to access a user data related with Samsung Account.3.3CVE-2021-25439samsung mobilesamsung members+1
EPSS score
0.22%
Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to cause arbitrary webpage loading in webview.3.3CVE-2022-36877samsung mobilesamsung members+1
EPSS score
0.23%
Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global and 14.0.02.4 in China allows local attackers to access device identification via log.4.3CVE-2022-28777samsung mobilesamsung members+1
EPSS score
0.24%
Improper access control vulnerability in Samsung Members prior to version 13.6.08.5 allows local attacker to execute call function without CALL_PHONE permission.5.5CVE-2022-30748samsung mobilesamsung members+1
EPSS score
0.22%
Unprotected dynamic receiver in Samsung Members prior to version 4.2.005 allows attacker to launch arbitrary activity.