Samsung Update vulnerabilities

3 CVEs affecting Samsung Update, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-36840, published 2022-08-05.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-7811, published 2020-10-12. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. Samsung Update 3.0.2.0 ~ 3.0.32.0 has a vulnerability that allows privilege escalation as commands crafted by attacker are executed while the engine deserializes the data received during…
• CVE-2022-28541, published 2022-04-11. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Uncontrolled search path element vulnerability in Samsung Update prior to version 3.0.77.0 allows attackers to execute arbitrary code as Samsung Update permission.
• CVE-2022-36840, published 2022-08-05. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. DLL hijacking vulnerability in Samsung Update Setup prior to version 2.2.9.50 allows attackers to execute arbitrary code.