Samsung x14j Firmware vulnerabilities

36 CVEs affecting Samsung x14j Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-5729, published 2017-03-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-1010: Adobe Flash Player and AIR Integer Overflow Vulnerability, published 2016-03-12. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-05-25. EPSS: 19.3% chance of exploitation in the next 30 days. Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK…
CVE-2016-1000, published 2016-03-12. High severity, CVSS 8.8. EPSS: 28.6% chance of exploitation in the next 30 days. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe…
CVE-2016-0999, published 2016-03-12. High severity, CVSS 8.8. EPSS: 28.6% chance of exploitation in the next 30 days. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe…
CVE-2016-0997, published 2016-03-12. High severity, CVSS 8.8. EPSS: 28.5% chance of exploitation in the next 30 days. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe…
CVE-2016-0998, published 2016-03-12. High severity, CVSS 8.8. EPSS: 28.3% chance of exploitation in the next 30 days. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe…
CVE-2016-1001, published 2016-03-12. High severity, CVSS 8.8. EPSS: 25.1% chance of exploitation in the next 30 days. Heap-based buffer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR…
CVE-2016-1002, published 2016-03-12. High severity, CVSS 8.8. EPSS: 19.7% chance of exploitation in the next 30 days. Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and…
CVE-2016-0729, published 2016-04-07. Critical severity, CVSS 9.8. EPSS: 9.1% chance of exploitation in the next 30 days. Multiple buffer overflows in (1) internal/XMLReader.cpp, (2) util/XMLURL.cpp, and (3) util/XMLUri.cpp in the XML Parser library in Apache Xerces-C before 3.1.3 allow remote attackers to cause a…
CVE-2016-0994, published 2016-03-12. High severity, CVSS 8.8. EPSS: 8% chance of exploitation in the next 30 days. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe…
CVE-2016-0990, published 2016-03-12. High severity, CVSS 8.8. EPSS: 7.2% chance of exploitation in the next 30 days. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe…

Latest

CVE-2015-5729, published 2017-03-23. Critical severity, CVSS 9.8. EPSS: 5% chance of exploitation in the next 30 days. The Soft Access Point (AP) feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain…
CVE-2016-1346, published 2016-04-06. Medium severity, CVSS 5.9. EPSS: 1.6% chance of exploitation in the next 30 days. The kernel in Cisco TelePresence Server 3.0 through 4.2(4.18) on Mobility Services Engine (MSE) 8710 devices allows remote attackers to cause a denial of service (panic and reboot) via a crafted…
CVE-2016-1350, published 2016-03-26. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service (device reload) via malformed SIP messages, aka…
CVE-2016-1349, published 2016-03-26. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows remote attackers to cause a denial of service (device reload) via crafted image list…
CVE-2016-1348, published 2016-03-26. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial of service (device reload) via a crafted DHCPv6 Relay message, aka Bug ID CSCus55821.
CVE-2016-1344, published 2016-03-26. Medium severity, CVSS 5.9. EPSS: 3% chance of exploitation in the next 30 days. The IKEv2 implementation in Cisco IOS 15.0 through 15.6 and IOS XE 3.3 through 3.17 allows remote attackers to cause a denial of service (device reload) via fragmented packets, aka Bug ID CSCux38417.
CVE-2016-1005, published 2016-03-12. High severity, CVSS 8.8. EPSS: 5.3% chance of exploitation in the next 30 days. Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and…