AN
Product
Android
by Samsung · last CVE Sep 9, 2026
On CISA KEVExploited in the wild
502
CVEs
12
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 181Medium 243Low 65
Watch

Add Android to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-25372
In wildKEV
6.7
1%
Mar 26
Samsung Mobile Devices Improper Boundary Check Vulnerability
Affected: 10.0; 10.0; 11.0; 11.0
CVE-2021-25371
In wildKEV
6.7
1%
Mar 26
Samsung Mobile Devices Unspecified Vulnerability
Affected: 10.0; 10.0; 11.0; 11.0
CVE-2021-25395
In wildKEV
6.4
0%
Jun 11
Samsung Mobile Devices Race Condition Vulnerability
Affected: 8.1; 9.0; 9.0; 9.0; 9.0; 10.0; +6 more
CVE-2021-25394
In wildKEV
6.4
0%
Jun 11
Samsung Mobile Devices Race Condition Vulnerability
Affected: 8.1; 9.0; 9.0; 9.0; 9.0; 10.0; +6 more
CVE-2021-25489
In wildKEV
5.5
1%
Oct 6
Samsung Mobile Devices Improper Input Validation Vulnerability
Affected: 8.1; 9.0; 9.0; 9.0; 9.0; 9.0; +22 more
CVE-2021-25369
In wildKEV
5.5
1%
Mar 26
Samsung Mobile Devices Improper Access Control Vulnerability
Affected: 8.0; 8.1; 9.0; 9.0; 9.0; 9.0; +34 more
CVE-2023-21492
In wildKEV
4.4
3%
May 4
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more
CVE-2021-25370
In wildKEV
4.4
1%
Mar 26
Samsung Mobile Devices Memory Corruption Vulnerability
Affected: 8.0; 8.1; 9.0; 9.0; 9.0; 9.0; +34 more
CVE-2026-21021
6.8
0%
May 13
Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity
Affected: 16.0; 16.0; 16.0; 16.0; 16.0; 16.0; +4 more
CVE-2026-21011
6.8
0%
Apr 13
Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock
Affected: 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +34 more
CVE-2026-21009
6.8
0%
Apr 13
Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning
Affected: 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +34 more
CVE-2026-21007
6.8
0%
Apr 13
Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard
Affected: 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +34 more
CVE-2026-21003
6.8
0%
Apr 13
Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restrictions
Affected: 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +34 more
CVE-2026-20980
6.8
0%
Feb 4
Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary commands
Affected: 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +34 more
CVE-2025-21047
6.8
0%
Oct 10
Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs
Affected: 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +34 more
CVE-2025-21032
6.8
0%
Sep 3
Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions
Affected: 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +34 more
CVE-2025-21031
6.8
0%
Sep 3
Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs
Affected: 13.0; 13.0; 13.0; 13.0; 13.0; 13.0; +34 more
CVE-2023-21473
6.8
0%
Sep 3
Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more
CVE-2023-21472
6.8
0%
Sep 3
Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary code in bootloader
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more
CVE-2025-20993
6.8
0%
Jun 4
Out-of-bounds write in libsecimaging.camera.samsung.so prior to SMR Jun-2025 Release 1 allows local attackers to write out-of-bounds memory
Affected: 13.0; 13.0; 13.0; 13.0; 13.0; 13.0; +34 more
CVE-2024-34587
6.8
1%
Jul 2
Improper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with…
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-20880
6.8
0%
Jun 4
Stack-based buffer overflow vulnerability in bootloader prior to SMR Jun-2024 Release 1 allows physical attackers to overwrite memory
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-20865
6.8
0%
May 7
Authentication bypass in bootloader prior to SMR May-2024 Release 1 allows physical attackers to flash arbitrary images
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2023-42561
6.8
0%
Dec 5
Heap out-of-bounds write vulnerability in bootloader prior to SMR Dec-2023 Release 1 allows a physical attacker to execute arbitrary code
Affected: 11.0 before 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +10 more
CVE-2023-42533
6.8
0%
Nov 7
Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execute arbitrary code in Kernel
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +33 more
CVE-2023-21513
6.8
0%
Jun 28
Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physical attackers to manipulate device to operate in way that results in unexpected…
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more
CVE-2023-21489
6.8
0%
May 4
Heap out-of-bounds write vulnerability in bootloader prior to SMR May-2023 Release 1 allows a physical attacker to execute arbitrary code
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more
CVE-2026-21104
6.7
0%
Sep 9
Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code
Affected: 15.0; 15.0; 15.0; 15.0; 15.0; 15.0; +30 more
CVE-2026-21102
6.7
0%
Sep 9
Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege
Affected: 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +34 more
CVE-2026-21101
6.7
0%
Sep 9
Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege
Affected: 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +34 more
CVE-2026-21097
6.7
0%
Sep 9
Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity
Affected: 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +34 more
CVE-2026-21093
6.7
0%
Sep 9
Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory
Affected: 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +34 more
CVE-2026-21085
6.7
0%
Sep 9
Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory
Affected: 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +34 more
CVE-2026-21018
6.7
0%
May 13
Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code
Affected: 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +34 more
CVE-2026-20968
6.7
0%
Jan 9
Use after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to execute arbitrary code
Affected: 13.0; 13.0; 13.0; 13.0; 13.0; 13.0; +34 more
CVE-2025-20983
6.7
0%
Jul 8
Out-of-bounds write in checking auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory
Affected: 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +34 more
CVE-2025-20982
6.7
0%
Jul 8
Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory
Affected: 14.0; 14.0; 14.0; 14.0; 14.0; 14.0; +34 more
CVE-2025-20987
6.7
0%
Jun 4
Improper access control in fingerprint trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to get a auth_token
Affected: 13.0; 13.0; 13.0; 13.0; 13.0; 13.0; +34 more
CVE-2025-20937
6.7
0%
May 7
Out-of-bounds write in Keymaster trustlet prior to SMR May-2025 Release 1 allows local privileged attackers to write out-of-bounds memory
Affected: 13.0; 13.0; 13.0; 13.0; 13.0; 13.0; +34 more
CVE-2025-20905
6.7
0%
Feb 4
Out-of-bounds read and write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged attackers to read and write out-of-bounds memory
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2025-20904
6.7
0%
Feb 4
Out-of-bounds write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged attackers to cause memory corruption
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2025-20885
6.7
0%
Feb 4
Out-of-bounds write in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privileged attackers to cause memory corruption
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-20881
6.7
0%
Jun 4
Improper input validation vulnerability in chnactiv TA prior to SMR Jun-2024 Release 1 allows local privileged attackers lead to potential arbitrary code execution
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-20863
6.7
0%
May 7
Out of bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-20862
6.7
0%
May 7
Out-of-bounds write in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more
CVE-2024-20861
6.7
0%
May 7
Use after free vulnerability in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to cause memory corruption
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-20843
6.7
0%
Apr 2
Out-of-bound write vulnerability in command parsing implementation of libIfaaCa prior to SMR Apr-2024 Release 1 allows local privileged attackers to execute arbitrary code
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-20842
6.7
0%
Apr 2
Improper Input Validation vulnerability in handling apdu of libsec-ril prior to SMR Apr-2024 Release 1 allows local privileged attackers to write out-of-bounds memory
Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +34 more
CVE-2024-20832
6.7
0%
Mar 5
Heap overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows local privileged attackers to execute arbitrary code
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more
CVE-2024-20831
6.7
0%
Mar 5
Stack overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows local privileged attackers to execute arbitrary code
Affected: 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +34 more
Page 1 of 5 · 243 total
12…5
The 500 most important CVEs for this product (exploited first, then by severity)