Samsung Mobile Samsung Pass

• CVE-2026-21057 Medium 6.8 Improper input validation in Samsung Pass prior to version 5.2.10.3 allows local privileged attackers to write out-of-bounds memory. 0.2%
• CVE-2024-49405 Medium 5.3 Improper authentication in Private Info in Samsung Pass in prior to version 4.4.04.7 allows physical attackers to access sensitive information in a specific scenario. 0.2%
• CVE-2023-42576 Medium 5.4 Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid exception handler. 0.4%
• CVE-2023-42575 Medium 5.4 Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid flag setting. 0.4%
• CVE-2023-42554 Medium 5.4 Improper Authentication vulnerabiity in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication. 0.3%
• CVE-2023-30677 Medium 6.1 Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data of Samsung Pass on a certain state of an unlocked device. 0.2%
• CVE-2023-30676 Medium 4.6 Improper access control vulnerability in Samsung Pass prior to version 4.2.03.1 allows physical attackers to access data of Samsung Pass. 0.2%
• CVE-2023-30675 Medium 6.2 Improper authentication in Samsung Pass prior to version 4.2.03.1 allows local attacker to access stored account information when Samsung Wallet is not installed. 0.2%
• CVE-2022-39911 Medium 4.8 Improper check or handling of exceptional conditions vulnerability in Samsung Pass prior to version 4.0.06.1 allows attacker to access Samsung Pass. 0.3%
• CVE-2022-39910 Low 3.9 Improper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical attackers to access data of Samsung Pass on a certain state of an unlocked device using pop-up view. 0.3%
• CVE-2022-39892 Low 3.6 Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature. 0.5%
• CVE-2022-36851 Low 3.9 Improper access control vulnerability in Samsung pass prior to version 4.0.03.1 allow physical attackers to access data of Samsung pass on a certain state of an unlocked device. 0.3%
• CVE-2022-36876 Low 1.8 Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication. 0.3%
• CVE-2022-30730 Medium 4.6 Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication. 0.3%
• CVE-2022-27841 Medium 4.3 Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that is previously running without authentication 0.3%
• CVE-2021-25505 Low 3.3 Improper authentication in Samsung Pass prior to 3.0.02.4 allows to use app without authentication when lockscreen is unlocked. 0.6%