Filtered by vendor Samsung
Subscribe
Total
1686 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-21063 | 1 Samsung | 1 Android | 2026-10-23 | N/A | 6.1 MEDIUM |
| Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function. | |||||
| CVE-2026-21079 | 1 Samsung | 1 Smart Switch | 2026-10-23 | N/A | 6.5 MEDIUM |
| Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data. | |||||
| CVE-2026-21073 | 1 Samsung | 1 Android | 2026-10-23 | N/A | 6.1 MEDIUM |
| Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity. | |||||
| CVE-2026-19587 | 1 Samsung | 1 Rlottie | 2026-10-23 | N/A | 6.5 MEDIUM |
| Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation. | |||||
| CVE-2026-19518 | 1 Samsung | 1 Rlottie | 2026-10-23 | N/A | 6.5 MEDIUM |
| Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation. | |||||
| CVE-2026-19517 | 1 Samsung | 1 Rlottie | 2026-10-23 | N/A | 6.5 MEDIUM |
| Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocation. | |||||
| CVE-2026-21062 | 1 Samsung | 1 Android | 2026-10-23 | N/A | 3.3 LOW |
| Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data. | |||||
| CVE-2025-52516 | 1 Samsung | 12 Exynos 1330, Exynos 1330 Firmware, Exynos 1380 and 9 more | 2026-10-19 | N/A | 6.2 MEDIUM |
| An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. An invalid kernel address dereference in the issimian device driver leads to a denial of service. | |||||
| CVE-2025-21075 | 1 Samsung | 1 Android | 2026-10-18 | N/A | 4.3 MEDIUM |
| Out-of-bounds write in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory. | |||||
| CVE-2025-21074 | 1 Samsung | 1 Android | 2026-10-18 | N/A | 4.3 MEDIUM |
| Out-of-bounds read in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory. | |||||
| CVE-2025-21076 | 1 Samsung | 1 Account | 2026-10-18 | N/A | 5.5 MEDIUM |
| Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows local attackers to access data in Samsung Account. User interaction is required for triggering this vulnerability. | |||||
| CVE-2025-21073 | 1 Samsung | 1 Android | 2026-10-18 | N/A | 6.8 MEDIUM |
| Insecure default configuration in USB connection mode prior to SMR Nov-2025 Release 1 allows privileged physical attackers to access user data. User interaction is required for triggering this vulnerability. | |||||
| CVE-2025-21078 | 1 Samsung | 1 Smart Switch | 2026-10-18 | N/A | 8.8 HIGH |
| Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications. | |||||
| CVE-2025-21079 | 1 Samsung | 1 Members | 2026-10-18 | N/A | 7.1 HIGH |
| Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability. | |||||
| CVE-2025-21077 | 1 Samsung | 1 Email | 2026-10-18 | N/A | 3.3 LOW |
| Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to launch arbitrary activity with Samsung Email privilege. | |||||
| CVE-2025-21071 | 1 Samsung | 1 Android | 2026-10-18 | N/A | 5.7 MEDIUM |
| Out-of-bounds write in handling opcode in fingerprint trustlet prior to SMR Nov-2025 Release 1 allows local privileged attackers to write out-of-bounds memory. | |||||
| CVE-2020-26144 | 3 Arista, Samsung, Siemens | 36 C-100, C-100 Firmware, C-110 and 33 more | 2026-10-08 | 3.3 LOW | 6.5 MEDIUM |
| An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL. An adversary can abuse this to inject arbitrary network packets independent of the network configuration. | |||||
| CVE-2025-21068 | 1 Samsung | 1 Notes | 2026-10-08 | N/A | 4.0 MEDIUM |
| Out-of-bounds read in the reading of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory. | |||||
| CVE-2025-21060 | 1 Samsung | 1 Smart Switch | 2026-10-08 | N/A | 5.5 MEDIUM |
| Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability. | |||||
| CVE-2025-21045 | 1 Samsung | 11 Galaxy Watch, Galaxy Watch 4, Galaxy Watch 4 Classic and 8 more | 2026-10-08 | N/A | 4.0 MEDIUM |
| Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. | |||||