Samsung Mobile vulnerabilities

Products

• Devices 867
• Notes 62
• Galaxy Store 29
• Account 29
• Internet 29
• Smart Switch 20
• Pass 16
• Email 15
• Health 15
• Members 15
• Smartthings 15
• Flow 11
• Blockchain Keystore 7
• Blockchain Keystore 7
• Pay 6
• Smart Things 6
• Tizen Wearable Devices 6
• Charm By Samsung 5
• Galaxy Wearable 5
• Group Sharing 5
• Assistant 5
• Checkout 5
• Cloud 5
• Gallery 5
• Voice Recorder 5
• Wearable Devices 5
• S Assistant 5
• Bixby 4
• Bixby Vision 4
• Find My Mobile 4
• Gallery 4
• Libsavsvc.so 4
• Camera 4
• Devices With Exynos Chipsets 4
• Secure Folder 4
• Smart Switch Pc 4
• Bixby Voice 3
• Factorycamera 3
• Galaxy Watch Plugin 3
• Gaminghub 3

Show 37 moreShow less

• Reminder 3
• Calendar 3
• Pay Mini 3
• Bixby Touch 2
• Calendar 2
• Camera 2
• Cameralyzer 2
• Com.samsung.android.waterplugin 2
• Easysetup 2
• Editor Lite 2
• Factorycamerafb 2
• Galaxy Book Go, Galaxy Book Go 5g, Galaxy Book2 Go And Galaxy Book2 Pro 360 2
• Galaxy Watch3 Plugin 2
• Libsavscmn 2
• Livewallpaper 2
• Motionphoto 2
• Myfiles 2
• Nearby Device Scanning 2
• Penup 2
• Quick Share 2
• Quick Share Agent 2
• Retail Mode 2
• Capture 2
• Cloud Assistant 2
• Data Store 2
• Internet Browser 2
• Keyboard 2
• Kies 2
• Samsungnotes 2
• Push Service 2
• Update 2
• Video Player 2
• Smarttagplugin 2
• Smart Touch Call 2
• Uphelper 2
• Watch Active2 Plugin 2
• Watch Active Plugin 2

Newest

• samsung mobile bixby Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to... CVE-2026-21157 8.3 HighOctober 29, 2026
• giantappman livewallpaper GiantappMan LiveWallPaper SignalR Hub UploadFile missing authentication CVE-2026-116110 6.9 MediumOctober 26, 2026
• samsung mobile continuity service for windows Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0... CVE-2026-21139 7.3 HighOctober 12, 2026
• samsung mobile smart switch Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows... CVE-2026-21138 6.9 MediumOctober 12, 2026
• samsung mobile smart switch Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files... CVE-2026-21137 5.1 MediumOctober 12, 2026
• samsung mobile smart switch Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to... CVE-2026-21136 6.8 MediumOctober 12, 2026
• samsung mobile internet Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to... CVE-2026-21135 5.9 MediumOctober 12, 2026
• samsung mobile flow Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to... CVE-2026-21134 6.1 MediumOctober 12, 2026
• samsung mobile flow Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access... CVE-2026-21133 5.1 MediumOctober 12, 2026
• samsung mobile internet Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers... CVE-2026-21132 6.0 MediumOctober 12, 2026
• samsung mobile flow Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to... CVE-2026-21131 2.1 LowOctober 12, 2026
• samsung mobile checkout Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1... CVE-2026-21130 5.1 MediumOctober 12, 2026
• samsung mobile checkout Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version... CVE-2026-21129 5.1 MediumOctober 12, 2026
• samsung mobile checkout Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1... CVE-2026-21128 5.1 MediumOctober 12, 2026
• samsung mobile account Improper export of android application components in Samsung Account prior to version 15.7.01.1... CVE-2026-21127 6.9 MediumOctober 12, 2026
• samsung mobile devices Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to... CVE-2026-21126 6.9 MediumOctober 12, 2026
• samsung mobile devices Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct... CVE-2026-21125 8.6 HighOctober 12, 2026
• samsung mobile devices Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to... CVE-2026-21124 8.6 HighOctober 12, 2026
• samsung mobile devices Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local... CVE-2026-21123 6.7 MediumOctober 12, 2026
• samsung mobile devices Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to... CVE-2026-21122 7.0 HighOctober 12, 2026
• samsung mobile devices Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows... CVE-2026-21121 6.9 MediumOctober 12, 2026
• samsung mobile devices Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to... CVE-2026-21120 8.9 HighOctober 12, 2026
• samsung mobile devices Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1... CVE-2026-21119 4.8 MediumOctober 12, 2026
• samsung mobile devices Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local... CVE-2026-21118 6.9 MediumOctober 12, 2026
• samsung mobile devices Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local... CVE-2026-21117 5.1 MediumOctober 12, 2026
• samsung mobile devices Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers... CVE-2026-21116 5.1 MediumOctober 12, 2026
• samsung mobile devices Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local... CVE-2026-21115 5.1 MediumOctober 12, 2026
• samsung mobile devices Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers... CVE-2026-21114 7.0 HighOctober 12, 2026
• samsung mobile devices Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local... CVE-2026-21140 6.9 MediumOctober 2, 2026
• flutecode secure folder FluteCode Secure Folder 1.2 -Plaintext vault files in shared storage bypass the PIN gate CVE-2026-84283 6.8 MediumSeptember 24, 2026
• samsung visual voicemail Improper export of android application components in Visual Voicemail prior to version 20.1.00.05... CVE-2026-21113 4.8 MediumSeptember 9, 2026
• samsung android, samsung mobile tips +1 more Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch... CVE-2026-21112 5.1 MediumSeptember 9, 2026
• samsung mobile libsthmbc Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of... CVE-2026-21111 6.9 MediumSeptember 9, 2026
• samsung mobile libsavscmn.so Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute... CVE-2026-21110 6.9 MediumSeptember 9, 2026
• samsung mobile watch plugin Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to... CVE-2026-21109 2.1 LowSeptember 9, 2026
• samsung bixby, samsung mobile bixby touch +1 more Improper export of android application components in Bixby Touch prior to version 4.3.01.17... CVE-2026-21108 6.9 MediumSeptember 9, 2026
• samsung notes Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write... CVE-2026-21107 6.9 MediumSeptember 9, 2026
• samsung mobile cloud assistant Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version... CVE-2026-21106 5.1 MediumSeptember 9, 2026
• samsung collection Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in... CVE-2026-21105 5.9 MediumSeptember 9, 2026
• samsung android, samsung mobile devices +1 more Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local... CVE-2026-21104 7.1 HighSeptember 9, 2026
• samsung android, samsung mobile devices +1 more Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to... CVE-2026-21103 6.8 MediumSeptember 9, 2026
• samsung android, samsung mobile devices +1 more Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to... CVE-2026-21102 9.3 CriticalSeptember 9, 2026
• samsung android, samsung mobile devices +1 more Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local... CVE-2026-21101 8.4 HighSeptember 9, 2026
• samsung android, samsung mobile devices +1 more Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to... CVE-2026-21100 6.9 MediumSeptember 9, 2026
• samsung android, samsung mobile devices +1 more Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local... CVE-2026-21099 5.1 MediumSeptember 9, 2026
• samsung android, samsung mobile devices +1 more Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers... CVE-2026-21098 6.9 MediumSeptember 9, 2026
• samsung android, samsung mobile devices +1 more Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows... CVE-2026-21097 4.6 MediumSeptember 9, 2026
• samsung android, samsung mobile devices +1 more Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026... CVE-2026-21096 Public exploit 9.2 CriticalSeptember 9, 2026
• samsung android, samsung mobile devices +1 more Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release... CVE-2026-21095 9.2 CriticalSeptember 9, 2026
• samsung android, samsung mobile devices +1 more Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent... CVE-2026-21094 6.1 MediumSeptember 9, 2026
• Show olderLoading…