Samsung Members (Samsung Mobile) - vulnerabilities (CVEs)
14 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-06-05. Vendor: Samsung Mobile.
CVEs of Samsung Members
- CVE-2026-21037 - CVSS 7.1 (high), 2026-06-05: Improper input validation in Samsung Members prior to version 5.8.01.5 allows local attackers to access arbitrary URL and launch arbitrary activity with…
- CVE-2026-20985 - CVSS 7 (high), 2026-02-04: Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL and launch arbitrary activity with…
- CVE-2025-21079 - CVSS 8.1 (high), 2025-11-05: Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with…
- CVE-2025-20949 - CVSS 9.1 (critical), 2025-05-07: Path traversal vulnerability in Samsung Members prior to version 5.0.00.11 allows attackers to read and write arbitrary file with the privilege of Samsung…
- CVE-2025-20898 - CVSS 4.6 (medium), 2025-02-04: Improper input validation in Samsung Members prior to version 5.2.00.12 allows physical attackers to access data across multiple user profiles.
- CVE-2023-30703 - CVSS 4.3 (medium), 2023-08-10: Improper URL validation vulnerability in Samsung Members prior to version 14.0.07.1 allows attackers to access sensitive information.
- CVE-2022-36877 - CVSS 3.3 (low), 2022-09-09: Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global and 14.0.02.4 in China allows local…
- CVE-2022-30748 - CVSS 5.5 (medium), 2022-06-07: Unprotected dynamic receiver in Samsung Members prior to version 4.2.005 allows attacker to launch arbitrary activity.
- CVE-2022-28777 - CVSS 4.3 (medium), 2022-04-11: Improper access control vulnerability in Samsung Members prior to version 13.6.08.5 allows local attacker to execute call function without CALL_PHONE…
- CVE-2021-25439 - CVSS 3.3 (low), 2021-07-08: Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above…
- CVE-2021-25438 - CVSS 7.8 (high), 2021-07-08: Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above…
- CVE-2021-25432 - CVSS 3.3 (low), 2021-07-08: Information exposure vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above…
- CVE-2021-25374 - CVSS 8.6 (high), 2021-04-09: An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in Android O(8.1) and below, and 3.9.00.9…
- CVE-2021-25343 - CVSS 4 (medium), 2021-03-04: Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above)…
