Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 5 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 402,033All CVEsplus 19,141 rejected
- 241Last 24 hours3,247 in the last 7 days
- 16,890Last 30 days1,562 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 0 | 0 | 0 | 0 | 765 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 765 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 | 765 |
| 2023 | 1 | 38 | 160 | 12 | 0 | 211 | 765 |
| 2022 | 0 | 44 | 241 | 71 | 0 | 356 | 554 |
| 2021 | 10 | 37 | 112 | 39 | 0 | 198 | 198 |
| Title | ||
|---|---|---|
| CVE-2023-42555 | Use of implicit intent for sensitive communication vulnerability in EasySetup prior to version 11.1.13 allows attackers to get the bluetooth address of user…Samsung Mobile · EasySetup | Medium6.3 |
| CVE-2023-42554 | Improper Authentication vulnerabiity in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication.Samsung Mobile · Samsung Pass | Medium5.4 |
| CVE-2023-42553 | Improper authorization verification vulnerability in Samsung Email prior to version 6.1.90.4 allows attackers to read sandbox data of email.Samsung Mobile · Samsung Email | Medium4.0 |
| CVE-2023-42552 | Implicit intent hijacking vulnerability in Firewall application prior to versions 12.1.00.24 in Android 11, 13.1.00.16 in Android 12 and 14.1.00.7 in Android…Samsung Mobile · Firewall | Medium4.4 |
| CVE-2023-42551 | Use of implicit intent for sensitive communication vulnerability in startTncActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access…Samsung Mobile · Samsung Account | Medium5.5 |
| CVE-2023-42550 | Use of implicit intent for sensitive communication vulnerability in startSignIn in Samsung Account prior to version 14.5.00.7 allows attackers to access…Samsung Mobile · Samsung Account | Medium5.5 |
| CVE-2023-42549 | Use of implicit intent for sensitive communication vulnerability in startNameValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers…Samsung Mobile · Samsung Account | Medium5.5 |
| CVE-2023-42548 | Use of implicit intent for sensitive communication vulnerability in startMandatoryCheckActivity in Samsung Account prior to version 14.5.00.7 allows attackers…Samsung Mobile · Samsung Account | Medium5.5 |
| CVE-2023-42547 | Use of implicit intent for sensitive communication vulnerability in startEmailValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers…Samsung Mobile · Samsung Account | Medium5.5 |
| CVE-2023-42546 | Use of implicit intent for sensitive communication vulnerability in startAgreeToDisclaimerActivity in Samsung Account prior to version 14.5.00.7 allows…Samsung Mobile · Samsung Account | Medium5.5 |
| CVE-2023-42545 | Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and…Samsung Mobile · Phone | Medium5.5 |
| CVE-2023-42544 | Improper access control vulnerability in Quick Share prior to 13.5.52.0 allows local attacker to access local files.Samsung Mobile · Quick Share | Medium5.5 |
| CVE-2023-42543 | Improper verification of intent by broadcast receiver vulnerability in Bixby Voice prior to version 3.3.35.12 allows attackers to access arbitrary data with…Samsung Mobile · Bixby Voice | Medium6.2 |
| CVE-2023-42542 | Improper access control vulnerability in Samsung Push Service prior to 3.4.10 allows local attackers to get register ID to identify the device.Samsung Mobile · Samsung Push Service | Low3.3 |
| CVE-2023-42541 | Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id.Samsung Mobile · Samsung Push Service | Medium4.0 |
| CVE-2023-42540 | Improper access control vulnerability in Samsung Account prior to version 14.5.01.1 allows attackers to access sensitive information via implicit intent.Samsung Mobile · Samsung Account | Medium4.0 |
| CVE-2023-42539 | PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows local attackers to access data.Samsung Mobile · Samsung Health | Medium4.7 |
| CVE-2023-42538 | An improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.Samsung Mobile · Samsung Mobile Devices | Medium5.9 |
| CVE-2023-42537 | An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.Samsung Mobile · Samsung Mobile Devices | High8.4 |
| CVE-2023-42536 | An improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write.Samsung Mobile · Samsung Mobile Devices | High8.4 |
| CVE-2023-42535 | Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.Samsung Mobile · Samsung Mobile Devices | High8.4 |
| CVE-2023-42534 | Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files with system privilege.Samsung Mobile · Samsung Mobile Devices | Medium6.3 |
| CVE-2023-42533 | Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel.Samsung Mobile · Samsung Mobile Devices | Medium6.6 |
| CVE-2023-42532 | Improper Certificate Validation in FotaAgent prior to SMR Nov-2023 Release1 allows remote attacker to intercept the network traffic including Firmware…Samsung Mobile · Samsung Mobile Devices | Medium5.9 |
| CVE-2023-42531 | Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on starting activities from…Samsung Mobile · Samsung Mobile Devices | Medium6.2 |
| CVE-2023-42530 | Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi and Wi-Fi Direct without User Interaction.Samsung Mobile · Samsung Mobile Devices | Medium6.7 |
| CVE-2023-42529 | Out-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to execute arbitrary code.Samsung Mobile · Samsung Mobile Devices | Medium6.7 |
| CVE-2023-42528 | Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.Samsung Mobile · Samsung Mobile Devices | Medium6.7 |
| CVE-2023-42527 | Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to expose sensitive…Samsung Mobile · Samsung Mobile Devices | Medium5.6 |
| CVE-2023-30739 | Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.Samsung Mobile · Samsung Mobile Devices | Medium6.7 |
| CVE-2023-30738 | An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galaxy Book…Samsung Mobile · Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galaxy Book Odyssey | Medium5.5 |
| CVE-2023-30737 | Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via implicit intent.Samsung Mobile · Samsung Health | Medium4.0 |
| CVE-2023-30736 | Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute javascript interface. To trigger this…Samsung Mobile · Samsung Assistant | Medium4.4 |
| CVE-2023-30735 | Improper Preservation of Permissions vulnerability in SAssistant prior to version 8.7 allows local attackers to access backup data in SAssistant.Samsung Mobile · SAssistant | Medium5.1 |
| CVE-2023-30734 | Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via implicit intent.Samsung Mobile · Samsung Health | Medium4.0 |
| CVE-2023-30733 | Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows local privileged attackers to perform code execution.Samsung Mobile · Samsung Mobile Devices | High7.8 |
| CVE-2023-30732 | Improper access control in system property prior to SMR Oct-2023 Release 1 allows local attacker to get CPU serial number.Samsung Mobile · Samsung Mobile Devices | Medium5.5 |
| CVE-2023-30731 | Logic error in package installation via debugger command prior to SMR Oct-2023 Release 1 allows physical attacker to install an application that has different…Samsung Mobile · Samsung Mobile Devices | Medium5.7 |
| CVE-2023-30727 | Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary Wi-Fi without User…Samsung Mobile · Samsung Mobile Devices | Medium6.7 |
| CVE-2023-30692 | Improper input validation vulnerability in Evaluator prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities.Samsung Mobile · Samsung Mobile Devices | High8.5 |
| CVE-2023-30690 | Improper input validation vulnerability in Duo prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities.Samsung Mobile · Samsung Mobile Devices | High8.5 |
| CVE-2023-30730 | Implicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 13.0.01.43,…Samsung Mobile · Camera | Low3.3 |
| CVE-2023-30729 | Improper Certificate Validation in Samsung Email prior to version 6.1.82.0 allows remote attacker to intercept the network traffic including sensitive…Samsung Mobile · Samsung Email | High8.1 |
| CVE-2023-30728 | Intent redirection vulnerability in PackageInstallerCHN prior to version 13.1.03.00 allows local attacker to access arbitrary file. This vulnerability requires…Samsung Mobile · PackageInstallerCHN | Medium4.4 |
| CVE-2023-30726 | PendingIntent hijacking vulnerability in GameLauncher prior to version 4.2.59.5 allows local attackers to access data.Samsung Mobile · GameLauncher | Medium4.7 |
| CVE-2023-30725 | Improper authentication in LocalProvier of Gallery prior to version 14.5.01.2 allows attacker to access the data in content provider.Samsung Mobile · Gallery | Medium5.1 |
| CVE-2023-30724 | Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history.Samsung Mobile · Gallery | Medium4.0 |
| CVE-2023-30723 | Improper input validation vulnerability in Samsung Health prior to version 6.24.2.011 allows attackers to write arbitrary file with Samsung Health privilege.Samsung Mobile · Samsung Health | Medium5.5 |
| CVE-2023-30722 | Protection Mechanism Failure in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.13.5 allows local attacker to execute arbitrary code.Samsung Mobile · Samsung Blockchain Keystore | Medium5.5 |
| CVE-2023-30721 | Insertion of sensitive information into log vulnerability in Locksettings prior to SMR Sep-2023 Release 1 allows a privileged local attacker to get lock screen…Samsung Mobile · Samsung Mobile Devices | Medium4.4 |