SM
Product
Samsung Mobile Devices
On CISA KEVExploited in the wild
152
CVEs
13
On KEV
9.8
Max CVSS
14
New 30D
Severity mix
Critical 6High 44Medium 80Low 27
Watch
Add Samsung Mobile Devices to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-33725 | 3.3 | Aug 5 | A vulnerability using PendingIntent in Knox VPN prior to SMR Aug-2022 Release 1 allows attackers to access content providers with system privilege Affected: Q(10), R(11) before SMR Aug-2022 Release 1 |
| CVE-2022-33728 | 3.3 | Aug 5 | Exposure of sensitive information in Bluetooth prior to SMR Aug-2022 Release 1 allows local attackers to access connected BT macAddress via Settings.Gloabal Affected: Q(10), R(11), S(12) before SMR Aug-2022 Release 1 |
| CVE-2022-33729 | 3.3 | Aug 5 | Improper restriction of broadcasting Intent in ConfirmConnectActivity of?NFC prior to SMR Aug-2022 Release 1 leaks MAC address of the connected Bluetooth device Affected: Q(10), R(11), S(12) before SMR Aug-2022 Release 1 |
| CVE-2026-21006 | 2.4 | Apr 13 | Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents Affected: All versions, or not specified |
| CVE-2026-20989 | 2.4 | Mar 16 | Improper verification of cryptographic signature in Font Settings prior to SMR Mar-2026 Release 1 allows physical attackers to use custom font Affected: All versions, or not specified |
| CVE-2024-34649 | 2.4 | Sep 4 | Improper access control in new Dex Mode in multitasking framework prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access an unlocked screen Affected: All versions, or not specified |
| CVE-2022-33720 | 2.4 | Aug 5 | Improper authentication vulnerability in AppLock prior to SMR Aug-2022 Release 1 allows physical attacker to access Chrome locked by AppLock via new tap shortcut Affected: Q(10), R(11) before SMR Aug-2022 Release 1 |