SamsungMobile

Latest CVEs · RSS

• CVE-2026-21139 2026-10-12 · CVSS 7.3
  Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile devic
• CVE-2026-21138 2026-10-12 · CVSS 6.9
  Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications.
• CVE-2026-21137 2026-10-12 · CVSS 5.1
  Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.
• CVE-2026-21136 2026-10-12 · CVSS 6.8
  Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process.
• CVE-2026-21135 2026-10-12 · CVSS 5.9
  Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information.
• CVE-2026-21134 2026-10-12 · CVSS 6.1
  Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.
• CVE-2026-21133 2026-10-12 · CVSS 5.1
  Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data.
• CVE-2026-21132 2026-10-12 · CVSS 6.0
  Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for tr
• CVE-2026-21131 2026-10-12 · CVSS 2.1
  Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on th
• CVE-2026-21130 2026-10-12 · CVSS 5.1
  Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity wit
• CVE-2026-21129 2026-10-12 · CVSS 5.1
  Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activit
• CVE-2026-21128 2026-10-12 · CVSS 5.1
  Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with S
• CVE-2026-21127 2026-10-12 · CVSS 6.9
  Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.
• CVE-2026-21126 2026-10-12 · CVSS 6.9
  Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bou
• CVE-2026-21125 2026-10-12 · CVSS 8.6
  Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute a
• CVE-2026-21124 2026-10-12 · CVSS 8.6
  Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially exec
• CVE-2026-21123 2026-10-12 · CVSS 6.7
  Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied p
• CVE-2026-21122 2026-10-12 · CVSS 7.0
  Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.
• CVE-2026-21121 2026-10-12 · CVSS 6.9
  Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.
• CVE-2026-21120 2026-10-12 · CVSS 8.9
  Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.
• CVE-2026-21119 2026-10-12 · CVSS 4.8
  Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory.
• CVE-2026-21118 2026-10-12 · CVSS 6.9
  Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage.
• CVE-2026-21117 2026-10-12 · CVSS 5.1
  Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information.
• CVE-2026-21116 2026-10-12 · CVSS 5.1
  Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
• CVE-2026-21115 2026-10-12 · CVSS 5.1
  Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.