Vulnerabilities (CVE)

Filtered by vendor Samsung Subscribe
Total 1686 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-21009 1 Samsung 1 Android 2026-10-26 N/A 6.8 MEDIUM
Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning.
CVE-2026-21003 1 Samsung 1 Android 2026-10-26 N/A 6.8 MEDIUM
Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restrictions.
CVE-2026-21012 1 Samsung 1 Android 2026-10-26 N/A 3.3 LOW
External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local attacker to create file with system privilege.
CVE-2026-25205 1 Samsung 1 Escargot 2026-10-26 N/A 7.4 HIGH
Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows out-of-bounds write.This issue affects Escargot:commit hash  97e8115ab1110bc502b4b5e4a0c689a71520d335 .
CVE-2026-25204 1 Samsung 1 Escargot 2026-10-26 N/A 6.2 MEDIUM
Deserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process abort. This issue affects escarogt prior to commit hash 97e8115ab1110bc502b4b5e4a0c689a71520d335
CVE-2026-41665 1 Samsung 1 One 2026-10-26 N/A 6.1 MEDIUM
Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory initialization for large intermediate tensors. Affected version is prior to commit 1.30.0.
CVE-2026-21011 1 Samsung 1 Android 2026-10-26 N/A 6.8 MEDIUM
Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock.
CVE-2026-21010 1 Samsung 1 Android 2026-10-26 N/A 6.6 MEDIUM
Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions.
CVE-2026-6840 1 Samsung 1 One 2026-10-26 N/A 5.5 MEDIUM
Missing bounds validation for operator could allow out of range operator-code lookup during model loading Affected version is prior to commit 1.30.0.
CVE-2026-21014 1 Samsung 1 Camera 2026-10-26 N/A 2.8 LOW
Improper access control in Samsung Camera prior to version 16.5.00.28 allows local attacker to access location data. User interaction is required for triggering this vulnerability.
CVE-2026-21015 1 Samsung 1 Android 2026-10-26 N/A 5.5 MEDIUM
Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker to access unique identifier.
CVE-2026-21016 1 Samsung 1 Android 2026-10-26 N/A 5.5 MEDIUM
Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21021 1 Samsung 1 Android 2026-10-26 N/A 6.8 MEDIUM
Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity.
CVE-2026-21020 1 Samsung 1 Android 2026-10-26 N/A 7.8 HIGH
Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to trigger privileged functions.
CVE-2026-21018 1 Samsung 1 Android 2026-10-26 N/A 6.7 MEDIUM
Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code.
CVE-2026-21022 1 Samsung 1 Android 2026-10-26 N/A 5.5 MEDIUM
Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-8915 1 Samsung 1 Escargot 2026-10-26 N/A 8.8 HIGH
Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers. This issue affects Escargot: 36f5fb58366a67b713c02f6fd985e924fcc09e31.
CVE-2026-21027 1 Samsung 1 Android 2026-10-26 N/A 3.3 LOW
Improper export of android application components in ImsSettings prior to SMR Jun-2026 Release 1 allows local attackers to trigger logging function.
CVE-2026-21029 1 Samsung 1 Android 2026-10-26 N/A 7.8 HIGH
Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows local attacker to execute privileged operations.
CVE-2026-21038 1 Samsung 1 Android Usb Driver 2026-10-26 N/A 5.5 MEDIUM
Improper input validation in Samsung Android USB Driver for Windows prior to version 1.9.5.0 allows local attacker to access out-of-bounds memory.