SM
Product
Samsung Mobile devices
On CISA KEVExploited in the wild
866
CVEs
13
On KEV
10.0
Max CVSS
13
New 30D
Severity mix
Critical 45High 275Medium 180Low 0
Watch
Add Samsung Mobile devices to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-25372 In wildKEV | 6.7 | Mar 26 | Samsung Mobile Devices Improper Boundary Check Vulnerability Affected: Q(10.0), R(11.0) devices with exynos980, exynos2100, exynos9830 before SMR Mar-2021 Release 1 |
| CVE-2021-25371 In wildKEV | 6.7 | Mar 26 | Samsung Mobile Devices Unspecified Vulnerability Affected: Q(10.0), R(11.0) devices with exynos980, exynos2100, exynos9830 before SMR Mar-2021 Release 1 |
| CVE-2021-25394 In wildKEV | 6.4 | Jun 11 | Samsung Mobile Devices Race Condition Vulnerability Affected: O(8.x), P(9.0), Q(10.0), R(11.0) before SMR MAY-2021 Release 1 |
| CVE-2021-25395 In wildKEV | 6.4 | Jun 11 | Samsung Mobile Devices Race Condition Vulnerability Affected: O(8.x), P(9.0), Q(10.0), R(11.0) before SMR MAY-2021 Release 1 |
| CVE-2021-25489 In wildKEV | 5.5 | Oct 6 | Samsung Mobile Devices Improper Input Validation Vulnerability Affected: O(8.1), P(9.0), Q(10.0), R(11.0) before SMR Oct-2021 Release 1 |
| CVE-2021-25369 In wildKEV | 5.5 | Mar 26 | Samsung Mobile Devices Improper Access Control Vulnerability Affected: O(8.x), P(9.0), Q(10.0) before SMR Mar-2021 Release 1 |
| CVE-2023-21492 In wildKEV | 4.4 | May 4 | Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability Affected: Selected Android 11, 12, 13 devices before SMR May-2023 Release 1 |
| CVE-2021-25370 In wildKEV | 4.4 | Mar 26 | Samsung Mobile Devices Memory Corruption Vulnerability Affected: Selected O(8.X), P(9.0), Q(10.0), R(11.0) before SMR Mar-2021 Release 1 |
| CVE-2026-21126 | 6.9 | Oct 12 | Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21121 | 6.9 | Oct 12 | Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs Affected: All versions, or not specified |
| CVE-2026-21118 | 6.9 | Oct 12 | Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage Affected: All versions, or not specified |
| CVE-2026-21140 | 6.9 | Oct 2 | Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications Affected: All versions, or not specified |
| CVE-2026-21041 | 6.9 | Jul 10 | Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information Affected: All versions, or not specified |
| CVE-2026-21040 | 6.9 | Jul 10 | Improper access control in IAFDService prior to SMR Jul-2026 Release 1 allows local privileged attackers to use the privileged APIs Affected: All versions, or not specified |
| CVE-2026-21039 | 6.9 | Jul 10 | Improper access control in Settings prior to SMR Jul-2026 Release 1 allows local attackers to configure Theft protection settings Affected: All versions, or not specified |
| CVE-2026-21052 | 6.8 | Jul 10 | Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privilege Affected: All versions, or not specified |
| CVE-2026-21021 | 6.8 | May 13 | Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity Affected: All versions, or not specified |
| CVE-2026-21011 | 6.8 | Apr 13 | Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock Affected: All versions, or not specified |
| CVE-2026-21009 | 6.8 | Apr 13 | Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning Affected: All versions, or not specified |
| CVE-2026-21007 | 6.8 | Apr 13 | Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard Affected: All versions, or not specified |
| CVE-2026-21003 | 6.8 | Apr 13 | Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restrictions Affected: All versions, or not specified |
| CVE-2026-20980 | 6.8 | Feb 4 | Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary commands Affected: All versions, or not specified |
| CVE-2025-21047 | 6.8 | Oct 10 | Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs Affected: All versions, or not specified |
| CVE-2025-21032 | 6.8 | Sep 3 | Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions Affected: All versions, or not specified |
| CVE-2025-21031 | 6.8 | Sep 3 | Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs Affected: All versions, or not specified |
| CVE-2023-21473 | 6.8 | Sep 3 | Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader Affected: All versions, or not specified |
| CVE-2023-21472 | 6.8 | Sep 3 | Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader Affected: All versions, or not specified |
| CVE-2025-20993 | 6.8 | Jun 4 | Out-of-bounds write in libsecimaging.camera.samsung.so prior to SMR Jun-2025 Release 1 allows local attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2024-34587 | 6.8 | Jul 2 | Improper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with… Affected: All versions, or not specified |
| CVE-2024-20880 | 6.8 | Jun 4 | Stack-based buffer overflow vulnerability in bootloader prior to SMR Jun-2024 Release 1 allows physical attackers to overwrite memory Affected: All versions, or not specified |
| CVE-2024-20865 | 6.8 | May 7 | Authentication bypass in bootloader prior to SMR May-2024 Release 1 allows physical attackers to flash arbitrary images Affected: All versions, or not specified |
| CVE-2023-42561 | 6.8 | Dec 5 | Heap out-of-bounds write vulnerability in bootloader prior to SMR Dec-2023 Release 1 allows a physical attacker to execute arbitrary code Affected: All versions, or not specified |
| CVE-2023-42533 | 6.8 | Nov 7 | Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel Affected: All versions, or not specified |
| CVE-2023-21513 | 6.8 | Jun 28 | Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physical attackers to manipulate device to operate in way that results in unexpected… Affected: Android 11, 12, 13 before SMR Jun-2023 Release 1 |
| CVE-2023-21489 | 6.8 | May 4 | Heap out-of-bounds write vulnerability in bootloader prior to SMR May-2023 Release 1 allows a physical attacker to execute arbitrary code Affected: Selected Android 11, 12, 13 Qualcomm devices before SMR May-2023 Release 1 |
| CVE-2022-33730 | 6.8 | Aug 5 | Heap-based buffer overflow vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows arbitrary code execution by physical attackers Affected: S(12) before SMR Aug-2022 Release 1 |
| CVE-2022-26091 | 6.8 | Apr 11 | Improper access control vulnerability in Knox Manage prior to SMR Apr-2022 Release 1 allows that physical attackers can bypass Knox Manage using a function key of hardware… Affected: Q(10), R(11), S(12) before SMR Apr-2022 Release 1 |
| CVE-2022-25832 | 6.8 | Apr 11 | Improper authentication vulnerability in S Secure prior to SMR Apr-2022 Release 1 allows physical attackers to use locked Myfiles app without authentication Affected: Select Q(10), R(11), S(12) devices before SMR Apr-2022 Release 1 |
| CVE-2026-21123 | 6.7 | Oct 12 | Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before… Affected: All versions, or not specified |
| CVE-2026-21104 | 6.7 | Sep 9 | Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code Affected: All versions, or not specified |
| CVE-2026-21102 | 6.7 | Sep 9 | Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege Affected: All versions, or not specified |
| CVE-2026-21101 | 6.7 | Sep 9 | Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege Affected: All versions, or not specified |
| CVE-2026-21097 | 6.7 | Sep 9 | Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity Affected: All versions, or not specified |
| CVE-2026-21093 | 6.7 | Sep 9 | Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21085 | 6.7 | Sep 9 | Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21043 | 6.7 | Jul 10 | Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system server privilege Affected: All versions, or not specified |
| CVE-2026-21018 | 6.7 | May 13 | Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code Affected: All versions, or not specified |
| CVE-2026-20968 | 6.7 | Jan 9 | Use after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to execute arbitrary code Affected: All versions, or not specified |
| CVE-2025-20983 | 6.7 | Jul 8 | Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2025-20982 | 6.7 | Jul 8 | Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)
