Samsung Members vulnerabilities

3 CVEs affecting Samsung Members, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-36877, published 2022-09-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-11614, published 2018-09-24. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Samsung Members Fixed in version 2.4.25. An attacker must first obtain the ability to execute…
CVE-2022-36877, published 2022-09-09. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global and 14.0.02.4 in China allows local attackers to access device identification via…
CVE-2021-25432, published 2021-07-08. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Information exposure vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to access chat…