Filtered by vendor Samsung Mobile Subscriptions
Total 182 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-21052 1 Samsung Mobile 1 Samsung Mobile Devices 2026-11-04 N/A
Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privilege.
CVE-2026-21157 1 Samsung Mobile 1 Bixby 2026-10-29 N/A
Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity.
CVE-2026-21070 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-10-23 4.6 Medium
Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information.
CVE-2026-21071 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-10-23 7.8 High
Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21072 2 Samsung, Samsung Mobile 2 Android, Samsung Mobile Devices 2026-10-23 7.8 High
Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21116 1 Samsung Mobile 1 Samsung Mobile Devices 2026-10-17 N/A
Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21121 1 Samsung Mobile 1 Samsung Mobile Devices 2026-10-17 N/A
Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.
CVE-2026-21127 1 Samsung Mobile 1 Samsung Account 2026-10-17 N/A
Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.
CVE-2026-21134 1 Samsung Mobile 1 Samsung Flow 2026-10-17 N/A
Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.
CVE-2026-21123 1 Samsung Mobile 1 Samsung Mobile Devices 2026-10-17 N/A
Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock.
CVE-2026-21119 1 Samsung Mobile 1 Samsung Mobile Devices 2026-10-16 N/A
Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory.
CVE-2026-21135 1 Samsung Mobile 1 Samsung Internet 2026-10-16 N/A
Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information.
CVE-2026-21133 1 Samsung Mobile 1 Samsung Flow 2026-10-16 N/A
Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data.
CVE-2026-21126 1 Samsung Mobile 1 Samsung Mobile Devices 2026-10-16 N/A
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21118 1 Samsung Mobile 1 Samsung Mobile Devices 2026-10-16 N/A
Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage.
CVE-2026-21117 1 Samsung Mobile 1 Samsung Mobile Devices 2026-10-16 N/A
Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21115 1 Samsung Mobile 1 Samsung Mobile Devices 2026-10-16 N/A
Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21139 1 Samsung Mobile 1 Samsung Continuity Service For Windows 2026-10-15 N/A
Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device.
CVE-2026-21132 1 Samsung Mobile 1 Samsung Internet 2026-10-15 N/A
Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability.
CVE-2026-21131 1 Samsung Mobile 1 Samsung Flow 2026-10-15 N/A
Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device.