EM
Product
Email
9
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 6Low 2
Watch
Add Email to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-30729 | 7.5 | Sep 6 | Improper Certificate Validation in Samsung Email prior to version 6.1.82.0 allows remote attacker to intercept the network traffic including sensitive information Affected: before 6.1.82.0 |
| CVE-2021-25375 | 6.5 | Apr 9 | Using predictable index for attachments in Samsung Email prior to version 6.1.41.0 allows remote attackers to get attachments of another emails when users open the malicious… Affected: before 6.1.14.0 |
| CVE-2024-34636 | 5.5 | Aug 7 | Use of implicit intent for sensitive communication in Samsung Email prior to version 6.1.94.2 allows local attackers to get sensitive information Affected: before 6.1.94.2 |
| CVE-2024-20867 | 5.5 | May 7 | Improper privilege management vulnerability in Samsung Email prior to version 6.1.91.14 allows local attackers to access sensitive information Affected: before 6.1.91.14 |
| CVE-2023-42553 | 5.3 | Nov 7 | Improper authorization verification vulnerability in Samsung Email prior to version 6.1.90.4 allows attackers to read sandbox data of email Affected: before 6.1.90.4 |
| CVE-2021-25376 | 5.3 | Apr 9 | An improper synchronization logic in Samsung Email prior to version 6.1.41.0 can leak messages in certain mailbox in plain text when STARTTLS negotiation is failed Affected: before 6.1.41.0 |
| CVE-2025-20894 | 4.6 | Feb 4 | Improper access control in Samsung Email prior to version 6.1.97.1 allows physical attackers to access data across multiple user profiles Affected: before 6.1.97.1 |
| CVE-2025-21077 | 3.3 | Nov 5 | Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to launch arbitrary activity with Samsung Email privilege Affected: before 6.2.06.0 |
| CVE-2024-20807 | 3.3 | Jan 4 | Implicit intent hijacking vulnerability in Samsung Email prior to version 6.1.90.16 allows local attacker to get sensitive information Affected: before 6.1.90.16 |
Showing 9