SM
Vendor
Samsung Mobile
543
CVEs
13
On KEV
28
New 30D
Products
SM9.8
Samsung Mobile Devices
Samsung Mobile
320 CVEs13 on KEV14 new
SS9.8
Smart Switch
Samsung Mobile
20 CVEs0 on KEV3 new
SF6.1
Samsung Flow
Samsung Mobile
6 CVEs0 on KEV3 new
SC5.5
Samsung Checkout
Samsung Mobile
5 CVEs0 on KEV3 new
SI7.1
Samsung Internet
Samsung Mobile
7 CVEs0 on KEV2 new
SA7.5
Samsung Account
Samsung Mobile
9 CVEs0 on KEV1 new
BI8.5
Bixby
Samsung Mobile
3 CVEs0 on KEV1 new
SC7.3
Samsung Continuity Service for windows
Samsung Mobile
1 CVEs0 on KEV1 new
SN9.8
Samsung notes
Samsung Mobile
34 CVEs0 on KEV0 new
SM7.5
SmartThings
Samsung Mobile
10 CVEs0 on KEV0 new
BK6.7
Blockchain Keystore
Samsung Mobile
7 CVEs0 on KEV0 new
GS7.8
Galaxy Store
Samsung Mobile
7 CVEs0 on KEV0 new
SH5.5
Samsung Health
Samsung Mobile
6 CVEs0 on KEV0 new
CB5.5
Charm by Samsung
Samsung Mobile
5 CVEs0 on KEV0 new
GW5.5
Galaxy Wearable
Samsung Mobile
5 CVEs0 on KEV0 new
SM9.1
Samsung Members
Samsung Mobile
5 CVEs0 on KEV0 new
LI7.8
libsavsvc.so
Samsung Mobile
4 CVEs0 on KEV0 new
SA7.1
Samsung Assistant
Samsung Mobile
4 CVEs0 on KEV0 new
SE5.5
Samsung email
Samsung Mobile
4 CVEs0 on KEV0 new
SG9.1
Samsung Gallery
Samsung Mobile
4 CVEs0 on KEV0 new
GA7.5
GamingHub
Samsung Mobile
3 CVEs0 on KEV0 new
SA3.3
S Assistant
Samsung Mobile
3 CVEs0 on KEV0 new
SF6.8
Secure Folder
Samsung Mobile
3 CVEs0 on KEV0 new
FA7.8
FactoryCamera
Samsung Mobile
2 CVEs0 on KEV0 new
GS5.3
Group Sharing
Samsung Mobile
2 CVEs0 on KEV0 new
LI7.8
libsavscmn
Samsung Mobile
2 CVEs0 on KEV0 new
MO7.8
MotionPhoto
Samsung Mobile
2 CVEs0 on KEV0 new
RM6.6
Retail Mode
Samsung Mobile
2 CVEs0 on KEV0 new
SC4.6
Samsung Camera
Samsung Mobile
2 CVEs0 on KEV0 new
SC5.1
Samsung Cloud Assistant
Samsung Mobile
2 CVEs0 on KEV0 new
SP6.8
Samsung Pass
Samsung Mobile
2 CVEs0 on KEV0 new
SV4.6
Samsung Voice Recorder
Samsung Mobile
2 CVEs0 on KEV0 new
SA5.5
SamsungNotes
Samsung Mobile
2 CVEs0 on KEV0 new
AO5.5
AODService
Samsung Mobile
1 CVEs0 on KEV0 new
BT5.5
Bixby Touch
Samsung Mobile
1 CVEs0 on KEV0 new
BV6.2
Bixby Vision
Samsung Mobile
1 CVEs0 on KEV0 new
CA3.3
Cameralyzer
Samsung Mobile
1 CVEs0 on KEV0 new
CS5.5
Chinese Samsung Members
Samsung Mobile
1 CVEs0 on KEV0 new
CO5.5
Collection
Samsung Mobile
1 CVEs0 on KEV0 new
EA5.5
EasySetup
Samsung Mobile
1 CVEs0 on KEV0 new
EX7.8
Exynos
Samsung Mobile
1 CVEs0 on KEV0 new
FA5.5
FactoryCameraFB
Samsung Mobile
1 CVEs0 on KEV0 new
GS3.3
Galaxy Store for Galaxy Watch
Samsung Mobile
1 CVEs0 on KEV0 new
GA8.7
GalaxyDiagnostics
Samsung Mobile
1 CVEs0 on KEV0 new
GL5.0
Game Launcher
Samsung Mobile
1 CVEs0 on KEV0 new
GO7.8
Game Optimizing Service
Samsung Mobile
1 CVEs0 on KEV0 new
GO5.5
GoodLock
Samsung Mobile
1 CVEs0 on KEV0 new
IN6.9
InputSharing
Samsung Mobile
1 CVEs0 on KEV0 new
IS5.5
isemtelephony
Samsung Mobile
1 CVEs0 on KEV0 new
LI6.9
libsavscmn.so
Samsung Mobile
1 CVEs0 on KEV0 new
LI6.9
libsthmbc
Samsung Mobile
1 CVEs0 on KEV0 new
MC5.1
Media Controller
Samsung Mobile
1 CVEs0 on KEV0 new
MG5.3
My Galaxy
Samsung Mobile
1 CVEs0 on KEV0 new
PA6.1
PackageInstallerCN
Samsung Mobile
1 CVEs0 on KEV0 new
PE6.2
PENUP
Samsung Mobile
1 CVEs0 on KEV0 new
PU4.0
PushNotification
Samsung Mobile
1 CVEs0 on KEV0 new
QS4.3
Quick Share Agent
Samsung Mobile
1 CVEs0 on KEV0 new
QU3.5
QuickShare
Samsung Mobile
1 CVEs0 on KEV0 new
RE3.3
Reminder
Samsung Mobile
1 CVEs0 on KEV0 new
RO7.3
Routines
Samsung Mobile
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-21157 New | BI Bixby Samsung Mobile | 8.3 | Oct 29 | Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity |
| CVE-2026-21139 | SC Samsung Continuity Service for windows Samsung Mobile | 7.3 | Oct 12 | Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device |
| CVE-2026-21138 | SS Smart Switch Samsung Mobile | 6.9 | Oct 12 | Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications |
| CVE-2026-21137 | SS Smart Switch Samsung Mobile | 5.1 | Oct 12 | Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege |
| CVE-2026-21136 | SS Smart Switch Samsung Mobile | 6.8 | Oct 12 | Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process |
| CVE-2026-21135 | SI Samsung Internet Samsung Mobile | 5.9 | Oct 12 | Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information |
| CVE-2026-21134 | SF Samsung Flow Samsung Mobile | 6.1 | Oct 12 | Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information |
| CVE-2026-21133 | SF Samsung Flow Samsung Mobile | 5.1 | Oct 12 | Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data |
| CVE-2026-21132 | SI Samsung Internet Samsung Mobile | 6.0 | Oct 12 | Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script |
| CVE-2026-21131 | SF Samsung Flow Samsung Mobile | 2.1 | Oct 12 | Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device |
| CVE-2026-21130 | SC Samsung Checkout Samsung Mobile | 5.1 | Oct 12 | Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout… |
| CVE-2026-21129 | SC Samsung Checkout Samsung Mobile | 5.1 | Oct 12 | Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung… |
| CVE-2026-21128 | SC Samsung Checkout Samsung Mobile | 5.1 | Oct 12 | Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout… |
| CVE-2026-21127 | SA Samsung Account Samsung Mobile | 6.9 | Oct 12 | Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data |
| CVE-2026-21126 | SM Samsung Mobile Devices Samsung Mobile | 6.9 | Oct 12 | Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory |
| CVE-2026-21125 | SM Samsung Mobile Devices Samsung Mobile | 8.6 | Oct 12 | Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code |
| CVE-2026-21124 | SM Samsung Mobile Devices Samsung Mobile | 8.6 | Oct 12 | Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code |
| CVE-2026-21123 | SM Samsung Mobile Devices Samsung Mobile | 6.7 | Oct 12 | Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before… |
| CVE-2026-21122 | SM Samsung Mobile Devices Samsung Mobile | 7.0 | Oct 12 | Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code |
| CVE-2026-21121 | SM Samsung Mobile Devices Samsung Mobile | 6.9 | Oct 12 | Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs |
| CVE-2026-21120 | SM Samsung Mobile Devices Samsung Mobile | 8.9 | Oct 12 | Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege |
| CVE-2026-21119 | SM Samsung Mobile Devices Samsung Mobile | 4.8 | Oct 12 | Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory |
| CVE-2026-21118 | SM Samsung Mobile Devices Samsung Mobile | 6.9 | Oct 12 | Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage |
| CVE-2026-21117 | SM Samsung Mobile Devices Samsung Mobile | 5.1 | Oct 12 | Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information |
| CVE-2026-21116 | SM Samsung Mobile Devices Samsung Mobile | 5.1 | Oct 12 | Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory |
| CVE-2026-21115 | SM Samsung Mobile Devices Samsung Mobile | 5.1 | Oct 12 | Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory |
| CVE-2026-21114 | SM Samsung Mobile Devices Samsung Mobile | 7.0 | Oct 12 | Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code |
| CVE-2026-21140 | SM Samsung Mobile Devices Samsung Mobile | 6.9 | Oct 2 | Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications |
| CVE-2026-21113 | VV Visual Voicemail Samsung Mobile | 5.5 | Sep 9 | Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission |
| CVE-2026-21112 | ST Samsung Tips Samsung Mobile | 5.5 | Sep 9 | Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege |
| CVE-2026-21111 | LI libsthmbc Samsung Mobile | 6.9 | Sep 9 | Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory |
| CVE-2026-21110 | LI libsavscmn.so Samsung Mobile | 6.9 | Sep 9 | Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code |
| CVE-2026-21109 | WP Watch Plugin Samsung Mobile | 2.1 | Sep 9 | Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information |
| CVE-2026-21108 | BT Bixby Touch Samsung Mobile | 5.5 | Sep 9 | Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information |
| CVE-2026-21107 | SN Samsung Notes Samsung Mobile | 5.5 | Sep 9 | Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory |
| CVE-2026-21106 | SC Samsung Cloud Assistant Samsung Mobile | 5.1 | Sep 9 | Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings |
| CVE-2026-21105 | CO Collection Samsung Mobile | 5.5 | Sep 9 | Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information |
| CVE-2026-21104 | SM Samsung Mobile Devices Samsung Mobile | 6.7 | Sep 9 | Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code |
| CVE-2026-21103 | SM Samsung Mobile Devices Samsung Mobile | 6.1 | Sep 9 | Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege |
| CVE-2026-21102 | SM Samsung Mobile Devices Samsung Mobile | 6.7 | Sep 9 | Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege |
| CVE-2026-21101 | SM Samsung Mobile Devices Samsung Mobile | 6.7 | Sep 9 | Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege |
| CVE-2026-21100 | SM Samsung Mobile Devices Samsung Mobile | 7.1 | Sep 9 | Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity |
| CVE-2026-21099 | SM Samsung Mobile Devices Samsung Mobile | 5.5 | Sep 9 | Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information |
| CVE-2026-21098 | SM Samsung Mobile Devices Samsung Mobile | 6.1 | Sep 9 | Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction |
| CVE-2026-21097 | SM Samsung Mobile Devices Samsung Mobile | 6.7 | Sep 9 | Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity |
| CVE-2026-21096 | SM Samsung Mobile Devices Samsung Mobile | 9.8 | Sep 9 | Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code |
| CVE-2026-21095 | SM Samsung Mobile Devices Samsung Mobile | 9.8 | Sep 9 | Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code |
| CVE-2026-21094 | SM Samsung Mobile Devices Samsung Mobile | 8.8 | Sep 9 | Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory |
| CVE-2026-21093 | SM Samsung Mobile Devices Samsung Mobile | 6.7 | Sep 9 | Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory |
| CVE-2026-21092 | SM Samsung Mobile Devices Samsung Mobile | 5.3 | Sep 9 | Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege |
| CVE-2026-21091 | SM Samsung Mobile Devices Samsung Mobile | 7.8 | Sep 9 | Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory |
| CVE-2026-21090 | SM Samsung Mobile Devices Samsung Mobile | 7.8 | Sep 9 | Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory |
| CVE-2026-21089 | SM Samsung Mobile Devices Samsung Mobile | 7.8 | Sep 9 | Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory |
| CVE-2026-21088 | SM Samsung Mobile Devices Samsung Mobile | 7.8 | Sep 9 | Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory |
| CVE-2026-21087 | SM Samsung Mobile Devices Samsung Mobile | 7.8 | Sep 9 | Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege |
| CVE-2026-21086 | SM Samsung Mobile Devices Samsung Mobile | 7.8 | Sep 9 | Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration |
| CVE-2026-21085 | SM Samsung Mobile Devices Samsung Mobile | 6.7 | Sep 9 | Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory |
| CVE-2026-21084 | SM SmartThings Samsung Mobile | 6.9 | Aug 10 | Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information |
| CVE-2026-21083 | SS Smart Switch Samsung Mobile | 6.5 | Aug 10 | Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data |
| CVE-2026-21082 | SH Samsung Health Samsung Mobile | 5.5 | Aug 10 | Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information |
