Account (Samsung) - vulnerabilities (CVEs)

28 CVEs, 0 in the last 30 days, 12 known versions, newest CVE from 2026-03-16. Vendor: Samsung.

CVEs of Account

CVE-2026-20994 - CVSS 6.9 (medium), 2026-03-16: URL redirection in Samsung Account prior to version 15.5.01.1 allows local attackers to potentially get access token.
CVE-2025-58487 - CVSS 4 (medium), 2025-12-02: Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege.
CVE-2025-58486 - CVSS 5.5 (medium), 2025-12-02: Improper input validation in Samsung Account prior to version 15.5.01.1 allows local attacker to execute arbitrary script.
CVE-2025-21076 - CVSS 5.5 (medium), 2025-11-05: Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows local attackers to access data in Samsung…
CVE-2023-21481 - CVSS 7.5 (high), 2025-09-03: Improper URL input validation vulnerability in Samsung Account application prior to version 14.1.0.0 allows remote attackers to get sensitive information.
CVE-2024-20841 - CVSS 5.5 (medium), 2024-03-05: Improper Handling of Insufficient Privileges in Samsung Account prior to version 14.8.00.3 allows local attackers to access data.
CVE-2023-42551 - CVSS 6.5 (medium), 2023-11-07: Use of implicit intent for sensitive communication vulnerability in startTncActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access…
CVE-2023-42550 - CVSS 6.5 (medium), 2023-11-07: Use of implicit intent for sensitive communication vulnerability in startSignIn in Samsung Account prior to version 14.5.00.7 allows attackers to access…
CVE-2023-42549 - CVSS 6.5 (medium), 2023-11-07: Use of implicit intent for sensitive communication vulnerability in startNameValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers…
CVE-2023-42548 - CVSS 6.5 (medium), 2023-11-07: Use of implicit intent for sensitive communication vulnerability in startMandatoryCheckActivity in Samsung Account prior to version 14.5.00.7 allows attackers…
CVE-2023-42547 - CVSS 6.5 (medium), 2023-11-07: Use of implicit intent for sensitive communication vulnerability in startEmailValidationActivity in Samsung Account prior to version 14.5.00.7 allows…
CVE-2023-42546 - CVSS 6.5 (medium), 2023-11-07: Use of implicit intent for sensitive communication vulnerability in startAgreeToDisclaimerActivity in Samsung Account prior to version 14.5.00.7 allows…
CVE-2023-42540 - CVSS 5.5 (medium), 2023-11-07: Improper access control vulnerability in Samsung Account prior to version 14.5.01.1 allows attackers to access sensitive information via implicit intent.
CVE-2022-39875 - CVSS 5.1 (medium), 2022-10-07: Improper component protection vulnerability in Samsung Account prior to version 13.5.0 allows attackers to unauthorized logout.
CVE-2022-39874 - CVSS 5.5 (medium), 2022-10-07: Sensitive log information leakage vulnerability in Samsung Account prior to version 13.5.0 allows attackers to unauthorized logout.
CVE-2022-39863 - CVSS 4.7 (medium), 2022-10-07: Intent redirection vulnerability in Samsung Account prior to version 13.5.01.3 allows attackers to access content providers without permission.
CVE-2022-30736 - CVSS 5.3 (medium), 2022-06-07: Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission.
CVE-2022-30743 - CVSS 5.3 (medium), 2022-06-07: Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission.
CVE-2022-30735 - CVSS 7.5 (high), 2022-06-07: Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the access_token without permission.
CVE-2022-30739 - CVSS 4.3 (medium), 2022-06-07: Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get an user email or phone number with a normal level…
CVE-2022-30734 - CVSS 5.3 (medium), 2022-06-07: Sensitive information exposure in Sign-out log in Samsung Account prior to version 13.2.00.6 allows attackers to get an user email or phone number without…
CVE-2022-30737 - CVSS 5.3 (medium), 2022-06-07: Implicit Intent hijacking vulnerability in Samsung Account prior to version 13.2.00.6 allows attackers to get email ID.
CVE-2022-30733 - CVSS 5.3 (medium), 2022-06-07: Sensitive information exposure in Sign-in log in Samsung Account prior to version 13.2.00.6 allows attackers to get an user email or phone number without…
CVE-2022-30732 - CVSS 7.5 (high), 2022-06-07: Exposure of Sensitive Information vulnerability in Samsung Account prior to version 13.2.00.6 allows attacker to access sensitive information via…
CVE-2021-25403 - CVSS 3.3 (low), 2021-06-11: Intent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P(9.0) and below, and 12.2.0.9 in Android Q(10.0) and above allows…
CVE-2021-25381 - CVSS 7.8 (high), 2021-04-09: Using unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P(9.0) and below, and 12.1.1.3 in Android Q(10.0) and above allows local…
CVE-2021-25351 - CVSS 3.2 (low), 2021-03-25: Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physically proximate attackers to log out user…
CVE-2021-25350 - CVSS 3.9 (low), 2021-03-25: Information Exposure vulnerability in Samsung Account prior to version 12.1.1.3 allows physically proximate attackers to access user information via log.