Samsung Mobile
Vulnerability activity for Samsung Mobile: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 27
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 31
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 32
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 8.3HighOct 29, 2026Samsung Mobile BixbyCVE-2026-21157Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity.
- 7.3HighOct 12, 2026Samsung Continuity Service for windows Auth bypass / access controlCVE-2026-21139Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device.
- 6.9MediumOct 12, 2026Samsung Mobile Smart Switch Auth bypass / access controlCVE-2026-21138Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications.
- 5.1MediumOct 12, 2026Samsung Mobile Smart Switch Path traversal / file handlingCVE-2026-21137Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.
- 6.8MediumOct 12, 2026Samsung Mobile Smart Switch Auth bypass / access controlCVE-2026-21136Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process.
- 5.9MediumOct 12, 2026Samsung Internet Auth bypass / access controlCVE-2026-21135Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information.
- 6.1MediumOct 12, 2026Samsung Flow Auth bypass / access controlCVE-2026-21134Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.
- 5.1MediumOct 12, 2026Samsung Flow Path traversal / file handlingCVE-2026-21133Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data.
- 6.0MediumOct 12, 2026Samsung InternetCVE-2026-21132Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability.
- 2.1LowOct 12, 2026Samsung Flow Privilege escalationCVE-2026-21131Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device.
- 5.1MediumOct 12, 2026Samsung CheckoutCVE-2026-21130Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.
- 5.1MediumOct 12, 2026Samsung CheckoutCVE-2026-21129Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges.
- 5.1MediumOct 12, 2026Samsung CheckoutCVE-2026-21128Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges.
- 6.9MediumOct 12, 2026Samsung AccountCVE-2026-21127Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.
- 6.9MediumOct 12, 2026Samsung Mobile Devices Memory corruptionCVE-2026-21126Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
- 8.6HighOct 12, 2026Samsung Mobile DevicesCVE-2026-21125Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.
- 8.6HighOct 12, 2026Samsung Mobile DevicesCVE-2026-21124Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.
- 6.7MediumOct 12, 2026Samsung Mobile Devices Privilege escalationCVE-2026-21123Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock.
- 7.0HighOct 12, 2026Samsung Mobile Devices Memory corruptionCVE-2026-21122Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.
- 6.9MediumOct 12, 2026Samsung Mobile DevicesCVE-2026-21121Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.
- 8.9HighOct 12, 2026Samsung Mobile Devices Memory corruptionCVE-2026-21120Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.
- 4.8MediumOct 12, 2026Samsung Mobile Devices Memory corruptionCVE-2026-21119Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory.
- 6.9MediumOct 12, 2026Samsung Mobile Devices Auth bypass / access controlCVE-2026-21118Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage.
- 5.1MediumOct 12, 2026Samsung Mobile Devices Auth bypass / access controlCVE-2026-21117Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information.
- 5.1MediumOct 12, 2026Samsung Mobile Devices Memory corruptionCVE-2026-21116Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
- 5.1MediumOct 12, 2026Samsung Mobile Devices Memory corruptionCVE-2026-21115Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
- 7.0HighOct 12, 2026Samsung Mobile Devices Memory corruptionCVE-2026-21114Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.
- 6.9MediumSep 9, 2026Samsung Mobile libsthmbc Memory corruptionCVE-2026-21111Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory.
- 6.9MediumSep 9, 2026Samsung Mobile libsavscmn.so Memory corruptionCVE-2026-21110Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code.
- 2.1LowSep 9, 2026Samsung Mobile Watch Plugin Auth bypass / access controlCVE-2026-21109Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information.
- 5.1MediumSep 9, 2026Samsung Cloud AssistantCVE-2026-21106Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings.
- 8.9HighMay 13, 2026Samsung Mobile DevicesCVE-2026-21019Improper input validation in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 allows local attacker to execute arbitrary code with system privilege.
Top products
- Samsung Mobile Devices14 CVEs in the last year
- Smart Switch3 CVEs in the last year
- Samsung Flow3 CVEs in the last year
- Samsung Checkout3 CVEs in the last year
- Samsung Internet2 CVEs in the last year
- Watch Plugin1 CVE in the last year
- Samsung Continuity Service for windows1 CVE in the last year
- Samsung Cloud Assistant1 CVE in the last year
- Samsung Account1 CVE in the last year
- libsthmbc1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.