SM
Product
Samsung Mobile devices
by Samsung Mobile · last CVE Oct 12, 2026
On CISA KEVExploited in the wild
866
CVEs
13
On KEV
10.0
Max CVSS
13
New 30D
Severity mix
Critical 45High 275Medium 180Low 0
Watch

Add Samsung Mobile devices to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-25372
In wildKEV
6.7
1%
Mar 26
Samsung Mobile Devices Improper Boundary Check Vulnerability
Affected: Q(10.0), R(11.0) devices with exynos980, exynos2100, exynos9830 before SMR Mar-2021 Release 1
CVE-2021-25371
In wildKEV
6.7
1%
Mar 26
Samsung Mobile Devices Unspecified Vulnerability
Affected: Q(10.0), R(11.0) devices with exynos980, exynos2100, exynos9830 before SMR Mar-2021 Release 1
CVE-2021-25394
In wildKEV
6.4
0%
Jun 11
Samsung Mobile Devices Race Condition Vulnerability
Affected: O(8.x), P(9.0), Q(10.0), R(11.0) before SMR MAY-2021 Release 1
CVE-2021-25395
In wildKEV
6.4
0%
Jun 11
Samsung Mobile Devices Race Condition Vulnerability
Affected: O(8.x), P(9.0), Q(10.0), R(11.0) before SMR MAY-2021 Release 1
CVE-2021-25489
In wildKEV
5.5
1%
Oct 6
Samsung Mobile Devices Improper Input Validation Vulnerability
Affected: O(8.1), P(9.0), Q(10.0), R(11.0) before SMR Oct-2021 Release 1
CVE-2021-25369
In wildKEV
5.5
1%
Mar 26
Samsung Mobile Devices Improper Access Control Vulnerability
Affected: O(8.x), P(9.0), Q(10.0) before SMR Mar-2021 Release 1
CVE-2023-21492
In wildKEV
4.4
3%
May 4
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
Affected: Selected Android 11, 12, 13 devices before SMR May-2023 Release 1
CVE-2021-25370
In wildKEV
4.4
1%
Mar 26
Samsung Mobile Devices Memory Corruption Vulnerability
Affected: Selected O(8.X), P(9.0), Q(10.0), R(11.0) before SMR Mar-2021 Release 1
CVE-2026-21126
6.9
0%
Oct 12
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory
Affected: All versions, or not specified
CVE-2026-21121
6.9
0%
Oct 12
Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs
Affected: All versions, or not specified
CVE-2026-21118
6.9
0%
Oct 12
Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage
Affected: All versions, or not specified
CVE-2026-21140
6.9
0%
Oct 2
Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications
Affected: All versions, or not specified
CVE-2026-21041
6.9
0%
Jul 10
Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information
Affected: All versions, or not specified
CVE-2026-21040
6.9
0%
Jul 10
Improper access control in IAFDService prior to SMR Jul-2026 Release 1 allows local privileged attackers to use the privileged APIs
Affected: All versions, or not specified
CVE-2026-21039
6.9
0%
Jul 10
Improper access control in Settings prior to SMR Jul-2026 Release 1 allows local attackers to configure Theft protection settings
Affected: All versions, or not specified
CVE-2026-21052
6.8
0%
Jul 10
Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privilege
Affected: All versions, or not specified
CVE-2026-21021
6.8
0%
May 13
Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity
Affected: All versions, or not specified
CVE-2026-21011
6.8
0%
Apr 13
Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock
Affected: All versions, or not specified
CVE-2026-21009
6.8
0%
Apr 13
Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning
Affected: All versions, or not specified
CVE-2026-21007
6.8
0%
Apr 13
Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard
Affected: All versions, or not specified
CVE-2026-21003
6.8
0%
Apr 13
Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restrictions
Affected: All versions, or not specified
CVE-2026-20980
6.8
0%
Feb 4
Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary commands
Affected: All versions, or not specified
CVE-2025-21047
6.8
0%
Oct 10
Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs
Affected: All versions, or not specified
CVE-2025-21032
6.8
0%
Sep 3
Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions
Affected: All versions, or not specified
CVE-2025-21031
6.8
0%
Sep 3
Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs
Affected: All versions, or not specified
CVE-2023-21473
6.8
0%
Sep 3
Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader
Affected: All versions, or not specified
CVE-2023-21472
6.8
0%
Sep 3
Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader
Affected: All versions, or not specified
CVE-2025-20993
6.8
0%
Jun 4
Out-of-bounds write in libsecimaging.camera.samsung.so prior to SMR Jun-2025 Release 1 allows local attackers to write out-of-bounds memory
Affected: All versions, or not specified
CVE-2024-34587
6.8
1%
Jul 2
Improper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with…
Affected: All versions, or not specified
CVE-2024-20880
6.8
0%
Jun 4
Stack-based buffer overflow vulnerability in bootloader prior to SMR Jun-2024 Release 1 allows physical attackers to overwrite memory
Affected: All versions, or not specified
CVE-2024-20865
6.8
0%
May 7
Authentication bypass in bootloader prior to SMR May-2024 Release 1 allows physical attackers to flash arbitrary images
Affected: All versions, or not specified
CVE-2023-42561
6.8
0%
Dec 5
Heap out-of-bounds write vulnerability in bootloader prior to SMR Dec-2023 Release 1 allows a physical attacker to execute arbitrary code
Affected: All versions, or not specified
CVE-2023-42533
6.8
0%
Nov 7
Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel
Affected: All versions, or not specified
CVE-2023-21513
6.8
0%
Jun 28
Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physical attackers to manipulate device to operate in way that results in unexpected…
Affected: Android 11, 12, 13 before SMR Jun-2023 Release 1
CVE-2023-21489
6.8
0%
May 4
Heap out-of-bounds write vulnerability in bootloader prior to SMR May-2023 Release 1 allows a physical attacker to execute arbitrary code
Affected: Selected Android 11, 12, 13 Qualcomm devices before SMR May-2023 Release 1
CVE-2022-33730
6.8
0%
Aug 5
Heap-based buffer overflow vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows arbitrary code execution by physical attackers
Affected: S(12) before SMR Aug-2022 Release 1
CVE-2022-26091
6.8
0%
Apr 11
Improper access control vulnerability in Knox Manage prior to SMR Apr-2022 Release 1 allows that physical attackers can bypass Knox Manage using a function key of hardware…
Affected: Q(10), R(11), S(12) before SMR Apr-2022 Release 1
CVE-2022-25832
6.8
0%
Apr 11
Improper authentication vulnerability in S Secure prior to SMR Apr-2022 Release 1 allows physical attackers to use locked Myfiles app without authentication
Affected: Select Q(10), R(11), S(12) devices before SMR Apr-2022 Release 1
CVE-2026-21123
6.7
0%
Oct 12
Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before…
Affected: All versions, or not specified
CVE-2026-21104
6.7
0%
Sep 9
Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code
Affected: All versions, or not specified
CVE-2026-21102
6.7
0%
Sep 9
Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege
Affected: All versions, or not specified
CVE-2026-21101
6.7
0%
Sep 9
Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege
Affected: All versions, or not specified
CVE-2026-21097
6.7
0%
Sep 9
Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity
Affected: All versions, or not specified
CVE-2026-21093
6.7
0%
Sep 9
Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory
Affected: All versions, or not specified
CVE-2026-21085
6.7
0%
Sep 9
Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory
Affected: All versions, or not specified
CVE-2026-21043
6.7
0%
Jul 10
Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system server privilege
Affected: All versions, or not specified
CVE-2026-21018
6.7
0%
May 13
Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code
Affected: All versions, or not specified
CVE-2026-20968
6.7
0%
Jan 9
Use after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to execute arbitrary code
Affected: All versions, or not specified
CVE-2025-20983
6.7
0%
Jul 8
Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory
Affected: All versions, or not specified
CVE-2025-20982
6.7
0%
Jul 8
Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory
Affected: All versions, or not specified
Page 1 of 4 · 180 total
12…4
The 500 most important CVEs for this product (exploited first, then by severity)