Samsung Update vulnerabilities

3 known vulnerabilities affecting samsung/update.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH3

Vulnerabilities

Page 1 of 1

CVE-2022-36840HIGHCVSS 7.8fixed in 2.2.9.502022-08-05

CVE-2022-36840 [MEDIUM] CWE-427 CVE-2022-36840: DLL hijacking vulnerability in Samsung Update Setup prior to version 2.2.9.50 allows attackers to ex DLL hijacking vulnerability in Samsung Update Setup prior to version 2.2.9.50 allows attackers to execute arbitrary code.

CVE-2022-28541HIGHCVSS 7.8fixed in 3.0.77.02022-04-11

CVE-2022-28541 [MEDIUM] CWE-22 CVE-2022-28541: Uncontrolled search path element vulnerability in Samsung Update prior to version 3.0.77.0 allows at Uncontrolled search path element vulnerability in Samsung Update prior to version 3.0.77.0 allows attackers to execute arbitrary code as Samsung Update permission.

CVE-2020-7811HIGHCVSS 7.8≥ 3.0.2.0, ≤ 3.0.32.02020-10-12

CVE-2020-7811 [MEDIUM] CWE-502 CVE-2020-7811: Samsung Update 3.0.2.0 ~ 3.0.32.0 has a vulnerability that allows privilege escalation as commands c Samsung Update 3.0.2.0 ~ 3.0.32.0 has a vulnerability that allows privilege escalation as commands crafted by attacker are executed while the engine deserializes the data received during inter-process communication