Samsung Kies — known CVE vulnerabilities

Every CVE whose affected-product data names Samsung Kies, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (11)

• CVE-2012-6429 — CVSS 10.0 (critical): Buffer overflow in the PrepareSync method in the SyncService.dll ActiveX control in Samsung Kies before 2.5.1.12123_2_7 allows remote…
• CVE-2012-3807 — CVSS 9.8 (critical): Samsung Kies before 2.5.0.12094_27_11 has arbitrary file execution.
• CVE-2012-2990 — CVSS 9.3 (critical): The MASetupCaller ActiveX control before 1.4.2012.508 in MASetupCaller.dll in MarkAny ContentSAFER, as distributed in Samsung KIES before…
• CVE-2012-3809 — CVSS 7.5 (high): Samsung Kies before 2.5.0.12094_27_11 has arbitrary directory modification.
• CVE-2012-3810 — CVSS 7.5 (high): Samsung Kies before 2.5.0.12094_27_11 has registry modification.
• CVE-2012-3806 — CVSS 7.5 (high): Samsung Kies before 2.5.0.12094_27_11 contains a NULL pointer dereference vulnerability which could allow remote attackers to perform a…
• CVE-2012-3808 — CVSS 7.5 (high): Samsung Kies before 2.5.0.12094_27_11 has arbitrary file modification.
• CVE-2015-8780 — CVSS 6.4 (medium): Samsung wssyncmlnps before 2015-10-31 allows directory traversal in a Kies restore, aka ZipFury.
• CVE-2022-27843 — CVSS 6.2 (medium): DLL hijacking vulnerability in Kies prior to version 2.6.4.22014_2 allows attacker to execute abitrary code.
• CVE-2022-30744 — CVSS 6.2 (medium): DLL hijacking vulnerability in KiesWrapper in Samsung Kies prior to version 2.6.4.22043_1 allows attacker to execute arbitrary code.
• CVE-2022-39845 — CVSS 5.5 (medium): Improper validation of integrity check vulnerability in Samsung Kies prior to version 2.6.4.22074 allows local attackers to delete…