Samsung Flow (Samsung Mobile) - vulnerabilities (CVEs)
11 CVEs, 3 in the last 30 days, 2 known versions, newest CVE from 2026-10-12. Vendor: Samsung Mobile.
CVEs of Samsung Flow
- CVE-2026-21134 - CVSS 6.1 (medium), 2026-10-12: Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.
- CVE-2026-21133 - CVSS 5.1 (medium), 2026-10-12: Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data.
- CVE-2026-21131 - CVSS 2.1 (low), 2026-10-12: Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on…
- CVE-2025-20971 - CVSS 5.5 (medium), 2025-05-07: Improper input validation in Samsung Flow prior to version 4.9.17.6 allows local attackers to access data within Samsung Flow.
- CVE-2025-20972 - CVSS 6.2 (medium), 2025-05-07: Improper verification of intent by broadcast receiver in Samsung Flow prior to version 4.9.17.6 allows local attackers to modify Samsung Flow configuration.
- CVE-2024-49407 - CVSS 4.6 (medium), 2024-11-06: Improper access control in Samsung Flow prior to version 4.9.15.7 allows physical attackers to access data across multiple user profiles.
- CVE-2024-34600 - CVSS 4.4 (medium), 2024-07-02: Improper verification of intent by broadcast receiver vulnerability in Samsung Flow prior to version 4.9.13.0 allows local attackers to copy image files to…
- CVE-2022-28775 - CVSS 5.1 (medium), 2022-04-11: Improper access control vulnerability in Samsung Flow prior to version 4.8.06.5 allows attacker to write the file without Samsung Flow permission.
- CVE-2022-28543 - CVSS 5.5 (medium), 2022-04-11: Path traversal vulnerability in Samsung Flow prior to version 4.8.07.4 allows local attackers to read arbitrary files as Samsung Flow permission.
- CVE-2021-25509 - CVSS 7.1 (high), 2021-11-05: A missing input validation in Samsung Flow Windows application prior to Version 4.8.5.0 allows attackers to overwrite abtraty file in the Windows known folders.
- CVE-2021-25507 - CVSS 5.7 (medium), 2021-11-05: Improper authorization vulnerability in Samsung Flow mobile application prior to 4.8.03.5 allows Samsung Flow PC application connected with user device to…
