Every CVE whose affected-product data names Samsung Health, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (11)
CVE-2021-25401 — CVSS 7.8 (high): Intent redirection vulnerability in Samsung Health prior to version 6.16 allows attacker to execute privileged action.
CVE-2025-21059 — CVSS 6.2 (medium): Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health.
CVE-2025-21019 — CVSS 5.5 (medium): Improper authorization in Samsung Health prior to version 6.30.1.003 allows local attackers to access data in Samsung Health. User…
CVE-2023-30723 — CVSS 5.5 (medium): Improper input validation vulnerability in Samsung Health prior to version 6.24.2.011 allows attackers to write arbitrary file with Samsung…
CVE-2021-25425 — CVSS 5.3 (medium): Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to read internal cache data via exported component.
CVE-2023-42539 — CVSS 4.7 (medium): PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows local attackers to…
CVE-2024-34597 — CVSS 4.4 (medium): Improper input validation in Samsung Health prior to version 6.27.0.113 allows local attackers to write arbitrary document files to the…
CVE-2023-30737 — CVSS 4.0 (medium): Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via…
CVE-2023-30734 — CVSS 4.0 (medium): Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via…
CVE-2021-25506 — CVSS 4.0 (medium): Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider or lead to denial…
CVE-2022-22283 — CVSS 2.8 (low): Improper session management vulnerability in Samsung Health prior to 6.20.1.005 prevents logging out from Samsung Health App.