Filtered by vendor Samsung
Subscribe
Total
1686 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-21031 | 1 Samsung | 1 Android | 2026-10-26 | N/A | 7.8 HIGH |
| Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is required for triggering this vulnerability. | |||||
| CVE-2026-28573 | 2 Google, Samsung | 2 Android, Wear Os | 2026-10-26 | N/A | 5.5 MEDIUM |
| In AndroidManifest.xml, there is a possible persistent denial of service due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. | |||||
| CVE-2026-21017 | 1 Samsung | 1 Android | 2026-10-26 | N/A | 5.5 MEDIUM |
| Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privileged files. | |||||
| CVE-2026-21035 | 1 Samsung | 1 Plus Tv | 2026-10-26 | N/A | 7.5 HIGH |
| Improper input validation in Samsung Plus TV prior to version 1.0.28.6 allows remote attackers to access sensitive information. | |||||
| CVE-2026-21032 | 1 Samsung | 1 Assistant | 2026-10-26 | N/A | 7.1 HIGH |
| Improper export of android application components in SmartHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script. | |||||
| CVE-2026-21026 | 1 Samsung | 1 Android | 2026-10-26 | N/A | 5.5 MEDIUM |
| Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to sensitive information. | |||||
| CVE-2026-21036 | 1 Samsung | 1 Internet | 2026-10-26 | N/A | 5.5 MEDIUM |
| Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information. | |||||
| CVE-2026-21033 | 1 Samsung | 1 Assistant | 2026-10-26 | N/A | 7.1 HIGH |
| Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script. | |||||
| CVE-2026-21025 | 1 Samsung | 1 Android | 2026-10-26 | N/A | 5.5 MEDIUM |
| Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information. | |||||
| CVE-2026-21030 | 1 Samsung | 1 Android | 2026-10-26 | N/A | 7.8 HIGH |
| Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions. | |||||
| CVE-2026-21034 | 2 Google, Samsung | 2 Android, Auto | 2026-10-26 | N/A | 3.3 LOW |
| Improper export of android application components in Samsung Auto prior to version 3.1.2.61 in Android 15 and 3.2.0.38 in Android 16 allows local attacker to change audio configuration. | |||||
| CVE-2026-21028 | 1 Samsung | 1 Android | 2026-10-26 | N/A | 5.5 MEDIUM |
| Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information. | |||||
| CVE-2026-25208 | 1 Samsung | 1 Escargot | 2026-10-26 | N/A | 8.1 HIGH |
| Integer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71520d335. | |||||
| CVE-2026-21023 | 1 Samsung | 1 Android | 2026-10-26 | N/A | 5.5 MEDIUM |
| Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction of specific application. | |||||
| CVE-2026-6839 | 1 Samsung | 1 One | 2026-10-26 | N/A | 6.6 MEDIUM |
| Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Source ONE Affected version is prior to commit 1.30.0. | |||||
| CVE-2026-21037 | 1 Samsung | 1 Members | 2026-10-25 | N/A | 7.1 HIGH |
| Improper input validation in Samsung Members prior to version 5.8.01.5 allows local attackers to access arbitrary URL and launch arbitrary activity with Samsung Members privilege. | |||||
| CVE-2026-15551 | 1 Samsung | 1 Rlottie | 2026-10-24 | N/A | 5.5 MEDIUM |
| Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects . | |||||
| CVE-2025-59440 | 1 Samsung | 40 Exynos 1080, Exynos 1080 Firmware, Exynos 1280 and 37 more | 2026-10-24 | N/A | 7.5 HIGH |
| An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper handling of SIM card proactive commands leads to a Denial of Service. | |||||
| CVE-2026-18772 | 1 Samsung | 1 Rlottie | 2026-10-23 | N/A | 6.5 MEDIUM |
| Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion. | |||||
| CVE-2025-57835 | 1 Samsung | 40 Exynos 1080, Exynos 1080 Firmware, Exynos 1280 and 37 more | 2026-10-23 | N/A | 7.5 HIGH |
| An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper memory initialization results in an illegal memory access, causing a system crash via a malformed RRCReconfiguration message. | |||||