Filtered by vendor Samsung Subscriptions
Filtered by product Android Subscriptions
Total 452 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-20968 1 Samsung 3 Android, Mobile, Samsung Mobile 2026-02-26 6.7 Medium
Use after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to execute arbitrary code.
CVE-2026-20970 1 Samsung 3 Android, Mobile, Mobile Devices 2026-02-26 7.8 High
Improper access control in SLocation prior to SMR Jan-2026 Release 1 allows local attackers to execute the privileged APIs.
CVE-2026-20971 1 Samsung 3 Android, Mobile, Mobile Devices 2026-02-26 7.8 High
Use After Free in PROCA driver prior to SMR Jan-2026 Release 1 allows local attackers to potentially execute arbitrary code.
CVE-2026-20979 1 Samsung 2 Android, Samsung Mobile 2026-02-26 7.8 High
Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings privilege.
CVE-2026-20983 1 Samsung 2 Android, Mobile Devices 2026-02-26 7.8 High
Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Samsung Dialer privilege.
CVE-2025-21015 2 Samsung, Samsung Mobile 3 Android, Samsung Mobile Devices, Samsung Mobile Devices 2026-02-24 4 Medium
Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document scanner's privilege.
CVE-2025-21014 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-02-24 4.3 Medium
Improper export of android application component in Emergency SoS prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information.
CVE-2025-20909 1 Samsung 1 Android 2026-02-24 4 Medium
Use of implicit intent for sensitive communication in Settings prior to SMR Mar-2025 Release 1 allows local attackers to access sensitive information.
CVE-2025-20991 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-02-11 4 Medium
Improper export of Android application components in Bluetooth prior to SMR Jun-2025 Release 1 allows local attackers to make devices discoverable.
CVE-2025-20992 1 Samsung 1 Android 2026-02-11 4 Medium
Out-of-bound read in libsecimaging.camera.samsung.so prior to SMR Feb-2025 Release 1 allows local attackers to read out-of-bounds memory.
CVE-2025-20993 1 Samsung 1 Android 2026-02-11 4 Medium
Out-of-bounds write in libsecimaging.camera.samsung.so prior to SMR Jun-2025 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2025-20989 1 Samsung 1 Android 2026-02-11 5.2 Medium
Improper logging in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a hmac_key.
CVE-2025-20988 1 Samsung 1 Android 2026-02-11 5.5 Medium
Out-of-bounds read in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to read out-of-bounds memory.
CVE-2025-20987 1 Samsung 1 Android 2026-02-11 5.2 Medium
Improper access control in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a auth_token.
CVE-2025-20985 1 Samsung 1 Android 2026-02-11 5.5 Medium
Improper privilege management in ThemeManager prior to SMR Jun-2025 Release 1 allows local privileged attackers to reuse trial items.
CVE-2025-20981 1 Samsung 1 Android 2026-02-11 6.2 Medium
Improper access control in AudioService prior to SMR Jun-2025 Release 1 allows local attackers to access sensitive information.
CVE-2026-20977 1 Samsung 2 Android, Mobile Devices 2026-02-06 5.5 Medium
Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows local attackers to interrupt its functioning.
CVE-2026-20978 1 Samsung 2 Android, Mobile Devices 2026-02-06 6.1 Medium
Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persistence configuration of the application.
CVE-2026-20982 1 Samsung 2 Android, Mobile Devices 2026-02-06 6.0 Medium
Path traversal in ShortcutService prior to SMR Feb-2026 Release 1 allows privileged local attacker to create file with system privilege.
CVE-2026-20981 1 Samsung 2 Android, Mobile Devices 2026-02-06 6.6 Medium
Improper input validation in FacAtFunction prior to SMR Feb-2026 Release 1 allows privileged physical attacker to execute arbitrary command with system privilege.