HE
Product
Health
by Samsung · last CVE Aug 10, 2026
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 10Low 2
Watch

Add Health to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-21082
5.5
0%
Aug 10
Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information
Affected: before 7.0.0
CVE-2026-21077
5.5
0%
Aug 10
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information
Affected: before 7.0.0
CVE-2026-21076
5.5
0%
Aug 10
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information
Affected: before 7.0.0
CVE-2025-21059
5.5
0%
Oct 10
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health
Affected: before 6.30.5.105
CVE-2025-21019
5.5
0%
Aug 6
Improper authorization in Samsung Health prior to version 6.30.1.003 allows local attackers to access data in Samsung Health
Affected: before 6.30.1.003
CVE-2023-42539
5.5
0%
Nov 7
PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows local attackers to access data
Affected: before 6.25
CVE-2023-30737
5.5
0%
Oct 4
Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via implicit intent
Affected: before 6.24.3.007
CVE-2023-30734
5.5
0%
Oct 4
Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via implicit intent
Affected: before 6.24.3.007
CVE-2021-25506
5.5
0%
Nov 5
Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider or lead to denial of service
Affected: before 6.19.1.0001
CVE-2021-25425
5.3
1%
Jun 11
Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to read internal cache data via exported component
Affected: before 6.17
Showing 10