Samsung Pass (Samsung Mobile) - vulnerabilities (CVEs)
16 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-07-10. Vendor: Samsung Mobile.
CVEs of Samsung Pass
- CVE-2026-21057 - CVSS 6.8 (medium), 2026-07-10: Improper input validation in Samsung Pass prior to version 5.2.10.3 allows local privileged attackers to write out-of-bounds memory.
- CVE-2024-49405 - CVSS 5.3 (medium), 2024-11-06: Improper authentication in Private Info in Samsung Pass in prior to version 4.4.04.7 allows physical attackers to access sensitive information in a specific…
- CVE-2023-42575 - CVSS 6.8 (medium), 2023-12-05: Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid flag setting.
- CVE-2023-42576 - CVSS 6.8 (medium), 2023-12-05: Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid exception…
- CVE-2023-42554 - CVSS 6.8 (medium), 2023-11-07: Improper Authentication vulnerabiity in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication.
- CVE-2023-30676 - CVSS 4.6 (medium), 2023-07-06: Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data of Samsung Pass.
- CVE-2023-30675 - CVSS 6.2 (medium), 2023-07-06: Improper authentication in Samsung Pass prior to version 4.2.03.1 allows local attacker to access stored account information when Samsung Wallet is not…
- CVE-2023-30677 - CVSS 6.1 (medium), 2023-07-06: Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data of Samsung Pass on a certain state of…
- CVE-2022-39910 - CVSS 4.2 (medium), 2022-12-08: Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data of Samsung Pass on a certain state of…
- CVE-2022-39911 - CVSS 6.8 (medium), 2022-12-08: Improper check or handling of exceptional conditions vulnerability in Samsung Pass prior to version 4.0.06.1 allows attacker to access Samsung Pass.
- CVE-2022-39892 - CVSS 9.8 (critical), 2022-11-09: Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature.
- CVE-2022-36876 - CVSS 2.4 (low), 2022-09-09: Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication.
- CVE-2022-36851 - CVSS 4.6 (medium), 2022-09-09: Improper access control vulnerability in Samsung pass prior to version 4.0.03.1 allow physical attackers to access data of Samsung pass on a certain state of…
- CVE-2022-30730 - CVSS 4.6 (medium), 2022-06-07: Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication.
- CVE-2022-27841 - CVSS 4.3 (medium), 2022-04-11: Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that is previously running without…
- CVE-2021-25505 - CVSS 7.8 (high), 2021-11-05: Improper authentication in Samsung Pass prior to 3.0.02.4 allows to use app without authentication when lockscreen is unlocked.
