Members (Samsung) - vulnerabilities (CVEs)
14 CVEs, 0 in the last 30 days, 12 known versions, newest CVE from 2026-06-05. Vendor: Samsung.
CVEs of Members
- CVE-2026-21037 - CVSS 7.1 (high), 2026-06-05: Improper input validation in Samsung Members prior to version 5.8.01.5 allows local attackers to access arbitrary URL and launch arbitrary activity with…
- CVE-2026-20986 - CVSS 5.5 (medium), 2026-02-04: Path traversal in Samsung Members prior to Chinese version 15.5.05.4 allows local attackers to overwrite data within Samsung Members.
- CVE-2026-20985 - CVSS 7 (high), 2026-02-04: Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL and launch arbitrary activity with…
- CVE-2025-21079 - CVSS 8.1 (high), 2025-11-05: Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with…
- CVE-2025-20949 - CVSS 9.1 (critical), 2025-05-07: Path traversal vulnerability in Samsung Members prior to version 5.0.00.11 allows attackers to read and write arbitrary file with the privilege of Samsung…
- CVE-2025-20898 - CVSS 4.6 (medium), 2025-02-04: Improper input validation in Samsung Members prior to version 5.2.00.12 allows physical attackers to access data across multiple user profiles.
- CVE-2023-30703 - CVSS 4.3 (medium), 2023-08-10: Improper URL validation vulnerability in Samsung Members prior to version 14.0.07.1 allows attackers to access sensitive information.
- CVE-2022-30748 - CVSS 5.5 (medium), 2022-06-07: Unprotected dynamic receiver in Samsung Members prior to version 4.2.005 allows attacker to launch arbitrary activity.
- CVE-2022-28777 - CVSS 4.3 (medium), 2022-04-11: Improper access control vulnerability in Samsung Members prior to version 13.6.08.5 allows local attacker to execute call function without CALL_PHONE…
- CVE-2021-25438 - CVSS 7.8 (high), 2021-07-08: Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above…
- CVE-2021-25439 - CVSS 3.3 (low), 2021-07-08: Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above…
- CVE-2021-25374 - CVSS 8.6 (high), 2021-04-09: An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in Android O(8.1) and below, and 3.9.00.9…
- CVE-2021-25342 - CVSS 4 (medium), 2021-03-04: Calling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauthorized actions including denial of service attack by hijacking the provider.
- CVE-2021-25343 - CVSS 4 (medium), 2021-03-04: Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above)…
