ME
Product
Members
14
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 5Low 4
Watch
Add Members to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-20949 | 9.1 | May 7 | Path traversal vulnerability in Samsung Members prior to version 5.0.00.11 allows attackers to read and write arbitrary file with the privilege of Samsung Members Affected: before 5.0.00.11 |
| CVE-2025-21079 | 8.1 | Nov 5 | Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members… Affected: before 5.5.01.3 |
| CVE-2021-25438 | 7.8 | Jul 8 | Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted… Affected: before 2.4.85.11; 3.9.10.11 |
| CVE-2021-25374 | 7.5 | Apr 9 | An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in Android O(8.1) and below, and 3.9.00.9 in Android P(9.0)… Affected: through 2.4.83.9; 3.9.00.9 and later |
| CVE-2026-21037 | 7.1 | Jun 5 | Improper input validation in Samsung Members prior to version 5.8.01.5 allows local attackers to access arbitrary URL and launch arbitrary activity with Samsung Members privilege Affected: before 5.8.01.5 |
| CVE-2026-20986 | 5.5 | Feb 4 | Path traversal in Samsung Members prior to Chinese version 15.5.05.4 allows local attackers to overwrite data within Samsung Members Affected: before 15.5.05.4 |
| CVE-2022-30748 | 5.5 | Jun 7 | Unprotected dynamic receiver in Samsung Members prior to version 4.2.005 allows attacker to launch arbitrary activity Affected: before 4.2.005 |
| CVE-2025-20898 | 4.6 | Feb 4 | Improper input validation in Samsung Members prior to version 5.2.00.12 allows physical attackers to access data across multiple user profiles Affected: before 5.2.00.12 |
| CVE-2026-20985 | 4.3 | Feb 4 | Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members… Affected: before 5.6.00.11 |
| CVE-2023-30703 | 4.3 | Aug 10 | Improper URL validation vulnerability in Samsung Members prior to version 14.0.07.1 allows attackers to access sensitive information Affected: before 14.0.07.1 |
| CVE-2022-28777 | 3.3 | Apr 11 | Improper access control vulnerability in Samsung Members prior to version 13.6.08.5 allows local attacker to execute call function without CALL_PHONE permission Affected: before 13.6.08.5 |
| CVE-2021-25439 | 3.3 | Jul 8 | Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted… Affected: before 2.4.85.11; 3.9.10.11 |
| CVE-2021-25343 | 3.3 | Mar 4 | Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized… Affected: before 2.4.81.13; before 3.8.00.13 |
| CVE-2021-25342 | 3.3 | Mar 4 | Calling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauthorized actions including denial of service attack by hijacking the provider Affected: before 2.4.81.13; before 3.8.00.13 |
Showing 14