Samsung Health (Samsung Mobile) - vulnerabilities (CVEs)
15 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-08-10. Vendor: Samsung Mobile.
CVEs of Samsung Health
- CVE-2026-21082 - CVSS 6.9 (medium), 2026-08-10: Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
- CVE-2026-21077 - CVSS 6.9 (medium), 2026-08-10: Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
- CVE-2026-21076 - CVSS 6.9 (medium), 2026-08-10: Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
- CVE-2026-21056 - CVSS 4.8 (medium), 2026-07-10: Improper authorization in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information.
- CVE-2025-21059 - CVSS 6.2 (medium), 2025-10-10: Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health.
- CVE-2025-21019 - CVSS 5.5 (medium), 2025-08-06: Improper authorization in Samsung Health prior to version 6.30.1.003 allows local attackers to access data in Samsung Health. User interaction is required for…
- CVE-2024-34597 - CVSS 4.4 (medium), 2024-07-02: Improper input validation in Samsung Health prior to version 6.27.0.113 allows local attackers to write arbitrary document files to the sandbox of Samsung…
- CVE-2023-42539 - CVSS 5.5 (medium), 2023-11-07: PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows local attackers to access data.
- CVE-2023-30737 - CVSS 5.5 (medium), 2023-10-04: Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via implicit intent.
- CVE-2023-30734 - CVSS 5.5 (medium), 2023-10-04: Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via implicit intent.
- CVE-2023-30723 - CVSS 9.8 (critical), 2023-09-06: Improper input validation vulnerability in Samsung Health prior to version 6.24.2.011 allows attackers to write arbitrary file with Samsung Health privilege.
- CVE-2022-22283 - CVSS 3.3 (low), 2022-01-10: Improper session management vulnerability in Samsung Health prior to 6.20.1.005 prevents logging out from Samsung Health App.
- CVE-2021-25506 - CVSS 5.5 (medium), 2021-11-05: Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider or lead to denial of service.
- CVE-2021-25425 - CVSS 5.3 (medium), 2021-06-11: Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to read internal cache data via exported component.
- CVE-2021-25401 - CVSS 7.8 (high), 2021-06-11: Intent redirection vulnerability in Samsung Health prior to version 6.16 allows attacker to execute privileged action.
