https://vulnogram.org/ Most recent CVEs assigned by samsungmobile (samsungmobile). https://vulnogram.org/seaview/icons/samsungmobile.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-21139 https://vulnogram.org/CVE-2026-21139 Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device. High Mon, 12 Oct 2026 04:57:58 GMT https://vulnogram.org/CVE-2026-21138 https://vulnogram.org/CVE-2026-21138 Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications. Medium Mon, 12 Oct 2026 04:57:56 GMT https://vulnogram.org/CVE-2026-21137 https://vulnogram.org/CVE-2026-21137 Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege. Medium Mon, 12 Oct 2026 04:57:55 GMT https://vulnogram.org/CVE-2026-21136 https://vulnogram.org/CVE-2026-21136 Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process. Medium Mon, 12 Oct 2026 04:57:54 GMT https://vulnogram.org/CVE-2026-21135 https://vulnogram.org/CVE-2026-21135 Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information. Medium Mon, 12 Oct 2026 04:57:53 GMT https://vulnogram.org/CVE-2026-21134 https://vulnogram.org/CVE-2026-21134 Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information. Medium Mon, 12 Oct 2026 04:57:52 GMT https://vulnogram.org/CVE-2026-21133 https://vulnogram.org/CVE-2026-21133 Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data. Medium Mon, 12 Oct 2026 04:57:51 GMT https://vulnogram.org/CVE-2026-21132 https://vulnogram.org/CVE-2026-21132 Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability. Medium Network Exploitable Mon, 12 Oct 2026 04:57:50 GMT https://vulnogram.org/CVE-2026-21131 https://vulnogram.org/CVE-2026-21131 Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device. Low Mon, 12 Oct 2026 04:57:49 GMT https://vulnogram.org/CVE-2026-21130 https://vulnogram.org/CVE-2026-21130 Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges. Medium Mon, 12 Oct 2026 04:57:47 GMT https://vulnogram.org/CVE-2026-21129 https://vulnogram.org/CVE-2026-21129 Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges. Medium Mon, 12 Oct 2026 04:57:46 GMT https://vulnogram.org/CVE-2026-21128 https://vulnogram.org/CVE-2026-21128 Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges. Medium Mon, 12 Oct 2026 04:57:45 GMT https://vulnogram.org/CVE-2026-21127 https://vulnogram.org/CVE-2026-21127 Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data. Medium Mon, 12 Oct 2026 04:57:44 GMT https://vulnogram.org/CVE-2026-21126 https://vulnogram.org/CVE-2026-21126 Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory. Medium Mon, 12 Oct 2026 04:57:42 GMT https://vulnogram.org/CVE-2026-21125 https://vulnogram.org/CVE-2026-21125 Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code. High Mon, 12 Oct 2026 04:57:41 GMT https://vulnogram.org/CVE-2026-21124 https://vulnogram.org/CVE-2026-21124 Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code. High Mon, 12 Oct 2026 04:57:40 GMT https://vulnogram.org/CVE-2026-21123 https://vulnogram.org/CVE-2026-21123 Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock. Medium Mon, 12 Oct 2026 04:57:39 GMT https://vulnogram.org/CVE-2026-21122 https://vulnogram.org/CVE-2026-21122 Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code. High Mon, 12 Oct 2026 04:57:38 GMT https://vulnogram.org/CVE-2026-21121 https://vulnogram.org/CVE-2026-21121 Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs. Medium Mon, 12 Oct 2026 04:57:37 GMT https://vulnogram.org/CVE-2026-21120 https://vulnogram.org/CVE-2026-21120 Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege. High Mon, 12 Oct 2026 04:57:36 GMT https://vulnogram.org/CVE-2026-21119 https://vulnogram.org/CVE-2026-21119 Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory. Medium Mon, 12 Oct 2026 04:57:34 GMT https://vulnogram.org/CVE-2026-21118 https://vulnogram.org/CVE-2026-21118 Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage. Medium Mon, 12 Oct 2026 04:57:33 GMT https://vulnogram.org/CVE-2026-21117 https://vulnogram.org/CVE-2026-21117 Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information. Medium Mon, 12 Oct 2026 04:57:32 GMT https://vulnogram.org/CVE-2026-21116 https://vulnogram.org/CVE-2026-21116 Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory. Medium Mon, 12 Oct 2026 04:57:31 GMT https://vulnogram.org/CVE-2026-21115 https://vulnogram.org/CVE-2026-21115 Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory. Medium Mon, 12 Oct 2026 04:57:30 GMT https://vulnogram.org/CVE-2026-21114 https://vulnogram.org/CVE-2026-21114 Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code. High Mon, 12 Oct 2026 04:57:29 GMT https://vulnogram.org/CVE-2026-21140 https://vulnogram.org/CVE-2026-21140 Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications. Medium Fri, 02 Oct 2026 01:05:39 GMT https://vulnogram.org/CVE-2026-21113 https://vulnogram.org/CVE-2026-21113 Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission. Medium Wed, 09 Sep 2026 04:48:03 GMT https://vulnogram.org/CVE-2026-21112 https://vulnogram.org/CVE-2026-21112 Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability. Medium Wed, 09 Sep 2026 04:48:02 GMT https://vulnogram.org/CVE-2026-21111 https://vulnogram.org/CVE-2026-21111 Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory. Medium Wed, 09 Sep 2026 04:48:01 GMT https://vulnogram.org/CVE-2026-21110 https://vulnogram.org/CVE-2026-21110 Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code. Medium Wed, 09 Sep 2026 04:48:00 GMT https://vulnogram.org/CVE-2026-21109 https://vulnogram.org/CVE-2026-21109 Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information. Low Wed, 09 Sep 2026 04:47:59 GMT https://vulnogram.org/CVE-2026-21108 https://vulnogram.org/CVE-2026-21108 Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information. Medium Wed, 09 Sep 2026 04:47:58 GMT https://vulnogram.org/CVE-2026-21107 https://vulnogram.org/CVE-2026-21107 Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory. Medium Wed, 09 Sep 2026 04:47:57 GMT https://vulnogram.org/CVE-2026-21106 https://vulnogram.org/CVE-2026-21106 Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings. Medium Wed, 09 Sep 2026 04:47:55 GMT https://vulnogram.org/CVE-2026-21105 https://vulnogram.org/CVE-2026-21105 Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information. Medium Wed, 09 Sep 2026 04:47:54 GMT https://vulnogram.org/CVE-2026-21104 https://vulnogram.org/CVE-2026-21104 Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code. High Wed, 09 Sep 2026 04:47:53 GMT https://vulnogram.org/CVE-2026-21103 https://vulnogram.org/CVE-2026-21103 Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege. Medium Wed, 09 Sep 2026 04:47:52 GMT https://vulnogram.org/CVE-2026-21102 https://vulnogram.org/CVE-2026-21102 Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege. Critical Wed, 09 Sep 2026 04:47:51 GMT https://vulnogram.org/CVE-2026-21101 https://vulnogram.org/CVE-2026-21101 Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege. High Wed, 09 Sep 2026 04:47:49 GMT https://vulnogram.org/CVE-2026-21100 https://vulnogram.org/CVE-2026-21100 Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity. Medium Wed, 09 Sep 2026 04:47:48 GMT https://vulnogram.org/CVE-2026-21099 https://vulnogram.org/CVE-2026-21099 Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information. Medium Wed, 09 Sep 2026 04:47:47 GMT https://vulnogram.org/CVE-2026-21098 https://vulnogram.org/CVE-2026-21098 Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction. Medium Wed, 09 Sep 2026 04:47:46 GMT https://vulnogram.org/CVE-2026-21097 https://vulnogram.org/CVE-2026-21097 Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity. Medium Wed, 09 Sep 2026 04:47:45 GMT https://vulnogram.org/CVE-2026-21096 https://vulnogram.org/CVE-2026-21096 Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code. Critical Network Exploitable Wed, 09 Sep 2026 04:47:44 GMT https://vulnogram.org/CVE-2026-21095 https://vulnogram.org/CVE-2026-21095 Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code. Critical Network Exploitable Wed, 09 Sep 2026 04:47:43 GMT https://vulnogram.org/CVE-2026-21094 https://vulnogram.org/CVE-2026-21094 Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory. Medium Wed, 09 Sep 2026 04:47:42 GMT https://vulnogram.org/CVE-2026-21093 https://vulnogram.org/CVE-2026-21093 Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory. Medium Wed, 09 Sep 2026 04:47:41 GMT https://vulnogram.org/CVE-2026-21092 https://vulnogram.org/CVE-2026-21092 Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege. High Network Exploitable Wed, 09 Sep 2026 04:47:40 GMT https://vulnogram.org/CVE-2026-21091 https://vulnogram.org/CVE-2026-21091 Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory. Medium Wed, 09 Sep 2026 04:47:39 GMT