Samsung Mobile - vulnerabilities (CVEs)

1423 CVEs in 185 products, 27 in the last 30 days, newest from 2026-10-12.

Products

• Samsung Mobile Devices - 866 CVEs
• Samsung Notes - 61 CVEs
• Galaxy Store - 29 CVEs
• Samsung Account - 29 CVEs
• Samsung Internet - 29 CVEs
• Smart Switch - 20 CVEs
• Samsung Pass - 16 CVEs
• Samsung Health - 15 CVEs
• Smartthings - 15 CVEs
• Samsung Members - 14 CVEs
• Samsung Email - 13 CVEs
• Samsung Flow - 11 CVEs
• Blockchain Keystore - 7 CVEs
• Samsung Blockchain Keystore - 7 CVEs
• Samsung Pay - 6 CVEs
• Smart Things - 6 CVEs
• Tizen Wearable Devices - 6 CVEs
• Charm By Samsung - 5 CVEs
• Exynos - 5 CVEs
• Galaxy Wearable - 5 CVEs
• Group Sharing - 5 CVEs
• S Assistant - 5 CVEs
• Samsung Assistant - 5 CVEs
• Samsung Checkout - 5 CVEs
• Samsung Cloud - 5 CVEs
• Samsung Gallery - 5 CVEs
• Samsung Voice Recorder - 5 CVEs
• Samsung Wearable Devices - 5 CVEs
• Bixby Vision - 4 CVEs
• Find My Mobile - 4 CVEs
• Gallery - 4 CVEs
• Libsavsvc.so - 4 CVEs
• Samsung Camera - 4 CVEs
• Samsung Mobile Devices With Exynos Chipsets - 4 CVEs
• Smart Switch Pc - 4 CVEs
• Bixby - 3 CVEs
• Bixby Voice - 3 CVEs
• Factorycamera - 3 CVEs
• Galaxy Watch Plugin - 3 CVEs
• Gaminghub - 3 CVEs
• Reminder - 3 CVEs
• Samsung Calendar - 3 CVEs
• Samsung Pay Mini - 3 CVEs
• Secure Folder - 3 CVEs
• Bixby Touch - 2 CVEs
• Calendar - 2 CVEs
• Camera - 2 CVEs
• Cameralyzer - 2 CVEs
• Com.samsung.android.waterplugin - 2 CVEs
• Easysetup - 2 CVEs
• Editor Lite - 2 CVEs
• Factorycamerafb - 2 CVEs
• Galaxy Book2 Go And Galaxy Book2 Pro 360 - 2 CVEs
• Galaxy Book Go - 2 CVEs
• Galaxy Book Go 5g - 2 CVEs
• Galaxy Watch3 Plugin - 2 CVEs
• Libsavscmn - 2 CVEs
• Motionphoto - 2 CVEs
• Myfiles - 2 CVEs
• Nearby Device Scanning - 2 CVEs
• Penup - 2 CVEs
• Quick Share - 2 CVEs
• Quick Share Agent - 2 CVEs
• Retail Mode - 2 CVEs
• Samsung Capture - 2 CVEs
• Samsung Cloud Assistant - 2 CVEs
• Samsung Data Store - 2 CVEs
• Samsung Keyboard - 2 CVEs
• Samsung Kies - 2 CVEs
• Samsung Push Service - 2 CVEs
• Samsung Video Player - 2 CVEs
• Samsungnotes - 2 CVEs
• Smart Touch Call - 2 CVEs
• Smarttagplugin - 2 CVEs
• Uphelper - 2 CVEs
• Watch Active2 Plugin - 2 CVEs
• Watch Active Plugin - 2 CVEs
• Accessibility - 1 CVEs
• Aodservice - 1 CVEs
• Ar Emoji Editor - 1 CVEs
• Bixby Routines - 1 CVEs
• Bixbytouch - 1 CVEs
• Chinese Samsung Members - 1 CVEs
• Cocktailbarservice - 1 CVEs
• Collection - 1 CVEs
• Com.android.providers.contacts - 1 CVEs
• Contacts - 1 CVEs
• Customization Service - 1 CVEs
• Findmymobile - 1 CVEs
• Firewall - 1 CVEs
• Galaxy Book - 1 CVEs
• Galaxy Book 2 Go - 1 CVEs
• Galaxy Book 2 Pro 360 - 1 CVEs
• Galaxy Book Pro - 1 CVEs
• Galaxy Book Pro 360 And Galaxy Book Odyssey - 1 CVEs
• Galaxy Buds Pro Manager - 1 CVEs
• Galaxy S3 Plugin - 1 CVEs
• Galaxy Store For Galaxy Watch - 1 CVEs
• Galaxy Themes - 1 CVEs
• Galaxybudsmanager Pc - 1 CVEs
• Galaxydiagnostics - 1 CVEs
• Galaxystore - 1 CVEs
• Galaxywatch4plugin - 1 CVEs
• Game Launcher - 1 CVEs
• Game Optimizing Service - 1 CVEs
• Gamehomecn - 1 CVEs
• Gamelauncher - 1 CVEs
• Gaming Hub - 1 CVEs
• Gear Iconx Pc Manager - 1 CVEs
• Gear S Plugin - 1 CVEs
• Goodlock - 1 CVEs
• Inputsharing - 1 CVEs
• Isemtelephony - 1 CVEs
• Kies - 1 CVEs
• Knox Mobile Enrollment - 1 CVEs
• Libsavscmn.so - 1 CVEs
• Libsthmbc - 1 CVEs
• Link Sharing - 1 CVEs
• Link To Windows Service - 1 CVEs
• Livewallpaper - 1 CVEs
• Media Controller - 1 CVEs
• My Files - 1 CVEs
• My Galaxy - 1 CVEs
• One Hand Operation - 1 CVEs
• Packageinstallerchn - 1 CVEs
• Packageinstallercn - 1 CVEs
• Phone - 1 CVEs
• Pushnotification - 1 CVEs
• Quickshare - 1 CVEs
• Routine - 1 CVEs
• Routines - 1 CVEs
• Runestone - 1 CVEs
• Samnsung Account - 1 CVEs
• Samsug Internet - 1 CVEs
• Samsung Account Web Sdk - 1 CVEs
• Samsung Android Usb Driver For Windows - 1 CVEs
• Samsung Android Usb Driver Windows Installer - 1 CVEs
• Samsung Auto - 1 CVEs
• Samsung Billing - 1 CVEs
• Samsung Blockchain Wallet - 1 CVEs
• Samsung Clould - 1 CVEs
• Samsung Continuity Service For Windows - 1 CVEs
• Samsung Core Service - 1 CVEs
• Samsung Experience Service - 1 CVEs
• Samsung Flow For Android - 1 CVEs
• Samsung Flow For Pc - 1 CVEs
• Samsung Gear Iconx Pc Manager - 1 CVEs
• Samsung Internet Browser - 1 CVEs
• Samsung Live Wallpaper Pc - 1 CVEs
• Samsung My Files - 1 CVEs
• Samsung Plus Tv - 1 CVEs
• Samsung Recovery - 1 CVEs
• Samsung Searchwidget - 1 CVEs
• Samsung Security Supporter - 1 CVEs
• Samsung Smart Switch - 1 CVEs
• Samsung System Support Service - 1 CVEs
• Samsung Theme - 1 CVEs
• Samsung Tips - 1 CVEs
• Samsung Update - 1 CVEs
• Samsung Update Setup - 1 CVEs
• Samsung Usb Driver Windows Installer For Mobile Phones - 1 CVEs
• Samsungcontacts - 1 CVEs
• Samsungdialer - 1 CVEs
• Samsungpassautofill - 1 CVEs
• Samsungvideoplayer - 1 CVEs
• Sassistant - 1 CVEs
• Search Widget - 1 CVEs
• Searchwidget - 1 CVEs
• Sharelive - 1 CVEs
• Slow Motion Editor - 1 CVEs
• Smart Manager - 1 CVEs
• Smart View - 1 CVEs
• Smarttouchcall - 1 CVEs
• Smp Sdk - 1 CVEs
• Sound Assistant - 1 CVEs
• Talkbackse - 1 CVEs
• The Patch Adds Proper Access Control To Use Explicit Intent. - 1 CVEs
• Themestore - 1 CVEs
• Tips - 1 CVEs
• Visual Voicemail - 1 CVEs
• Voice Note - 1 CVEs
• Voice Wake-up - 1 CVEs
• Watch Plugin - 1 CVEs
• Waterplugin - 1 CVEs
• Wcsextension For Galaxy Watch - 1 CVEs

Newest CVEs of Samsung Mobile

• CVE-2026-21139 - CVSS 7.3 (high), 2026-10-12: Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile…
• CVE-2026-21138 - CVSS 6.9 (medium), 2026-10-12: Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications.
• CVE-2026-21137 - CVSS 5.1 (medium), 2026-10-12: Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.
• CVE-2026-21136 - CVSS 6.8 (medium), 2026-10-12: Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process.
• CVE-2026-21135 - CVSS 5.9 (medium), 2026-10-12: Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information.
• CVE-2026-21134 - CVSS 6.1 (medium), 2026-10-12: Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.
• CVE-2026-21133 - CVSS 5.1 (medium), 2026-10-12: Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data.
• CVE-2026-21132 - CVSS 6 (medium), 2026-10-12: Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for…
• CVE-2026-21131 - CVSS 2.1 (low), 2026-10-12: Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on…
• CVE-2026-21130 - CVSS 5.1 (medium), 2026-10-12: Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity…
• CVE-2026-21129 - CVSS 5.1 (medium), 2026-10-12: Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary…
• CVE-2026-21128 - CVSS 5.1 (medium), 2026-10-12: Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with…
• CVE-2026-21127 - CVSS 6.9 (medium), 2026-10-12: Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.
• CVE-2026-21126 - CVSS 6.9 (medium), 2026-10-12: Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write…
• CVE-2026-21125 - CVSS 8.6 (high), 2026-10-12: Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute…
• CVE-2026-21124 - CVSS 8.6 (high), 2026-10-12: Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially…
• CVE-2026-21123 - CVSS 6.7 (medium), 2026-10-12: Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied…
• CVE-2026-21122 - CVSS 7 (high), 2026-10-12: Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.
• CVE-2026-21121 - CVSS 6.9 (medium), 2026-10-12: Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.
• CVE-2026-21120 - CVSS 8.9 (high), 2026-10-12: Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege.
• CVE-2026-21119 - CVSS 4.8 (medium), 2026-10-12: Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory.
• CVE-2026-21118 - CVSS 6.9 (medium), 2026-10-12: Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage.
• CVE-2026-21117 - CVSS 5.1 (medium), 2026-10-12: Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information.
• CVE-2026-21116 - CVSS 5.1 (medium), 2026-10-12: Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
• CVE-2026-21115 - CVSS 5.1 (medium), 2026-10-12: Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory.
• CVE-2026-21114 - CVSS 7 (high), 2026-10-12: Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code.
• CVE-2026-21140 - CVSS 6.9 (medium), 2026-10-02: Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications.
• CVE-2026-21113 - CVSS 5.5 (medium), 2026-09-09: Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper…
• CVE-2026-21112 - CVSS 5.5 (medium), 2026-09-09: Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User…
• CVE-2026-21111 - CVSS 6.9 (medium), 2026-09-09: Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory.