SM
Product
Samsung Mobile Devices
by Samsung Mobile · last CVE Oct 12, 2026
On CISA KEVExploited in the wild
179
CVEs
13
On KEV
9.8
Max CVSS
14
New 30D
Severity mix
Critical 7High 52Medium 92Low 28
Watch

Add Samsung Mobile Devices to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-25372
In wildKEV
6.7
1%
Mar 26
Samsung Mobile Devices Improper Boundary Check Vulnerability
Affected: Q(10.0), R(11.0) devices with exynos980, exynos2100, exynos9830 before SMR Mar-2021 Release 1
CVE-2021-25371
In wildKEV
6.7
1%
Mar 26
Samsung Mobile Devices Unspecified Vulnerability
Affected: Q(10.0), R(11.0) devices with exynos980, exynos2100, exynos9830 before SMR Mar-2021 Release 1
CVE-2021-25394
In wildKEV
6.4
0%
Jun 11
Samsung Mobile Devices Race Condition Vulnerability
Affected: O(8.x), P(9.0), Q(10.0), R(11.0) before SMR MAY-2021 Release 1
CVE-2021-25395
In wildKEV
6.4
0%
Jun 11
Samsung Mobile Devices Race Condition Vulnerability
Affected: O(8.x), P(9.0), Q(10.0), R(11.0) before SMR MAY-2021 Release 1
CVE-2021-25489
In wildKEV
5.5
1%
Oct 6
Samsung Mobile Devices Improper Input Validation Vulnerability
Affected: O(8.1), P(9.0), Q(10.0), R(11.0) before SMR Oct-2021 Release 1
CVE-2021-25369
In wildKEV
5.5
1%
Mar 26
Samsung Mobile Devices Improper Access Control Vulnerability
Affected: O(8.x), P(9.0), Q(10.0) before SMR Mar-2021 Release 1
CVE-2023-21492
In wildKEV
4.4
3%
May 4
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
Affected: Selected Android 11, 12, 13 devices before SMR May-2023 Release 1
CVE-2021-25370
In wildKEV
4.4
1%
Mar 26
Samsung Mobile Devices Memory Corruption Vulnerability
Affected: Selected O(8.X), P(9.0), Q(10.0), R(11.0) before SMR Mar-2021 Release 1
CVE-2026-21126
6.9
0%
Oct 12
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory
Affected: All versions, or not specified
CVE-2026-21121
6.9
0%
Oct 12
Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs
Affected: All versions, or not specified
CVE-2026-21118
6.9
0%
Oct 12
Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage
Affected: All versions, or not specified
CVE-2026-21140
6.9
0%
Oct 2
Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications
Affected: All versions, or not specified
CVE-2026-21041
6.9
0%
Jul 10
Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information
Affected: All versions, or not specified
CVE-2026-21040
6.9
0%
Jul 10
Improper access control in IAFDService prior to SMR Jul-2026 Release 1 allows local privileged attackers to use the privileged APIs
Affected: All versions, or not specified
CVE-2026-21039
6.9
0%
Jul 10
Improper access control in Settings prior to SMR Jul-2026 Release 1 allows local attackers to configure Theft protection settings
Affected: All versions, or not specified
CVE-2026-21052
6.8
0%
Jul 10
Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privilege
Affected: All versions, or not specified
CVE-2026-21021
6.8
0%
May 13
Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity
Affected: All versions, or not specified
CVE-2026-21011
6.8
0%
Apr 13
Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock
Affected: All versions, or not specified
CVE-2026-21009
6.8
0%
Apr 13
Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning
Affected: All versions, or not specified
CVE-2026-21007
6.8
0%
Apr 13
Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard
Affected: All versions, or not specified
CVE-2026-21003
6.8
0%
Apr 13
Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restrictions
Affected: All versions, or not specified
CVE-2026-20980
6.8
0%
Feb 4
Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary commands
Affected: All versions, or not specified
CVE-2022-33730
6.8
0%
Aug 5
Heap-based buffer overflow vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows arbitrary code execution by physical attackers
Affected: S(12) before SMR Aug-2022 Release 1
CVE-2026-21123
6.7
0%
Oct 12
Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before…
Affected: All versions, or not specified
CVE-2026-21104
6.7
0%
Sep 9
Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code
Affected: All versions, or not specified
CVE-2026-21102
6.7
0%
Sep 9
Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege
Affected: All versions, or not specified
CVE-2026-21101
6.7
0%
Sep 9
Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege
Affected: All versions, or not specified
CVE-2026-21097
6.7
0%
Sep 9
Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity
Affected: All versions, or not specified
CVE-2026-21093
6.7
0%
Sep 9
Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory
Affected: All versions, or not specified
CVE-2026-21085
6.7
0%
Sep 9
Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory
Affected: All versions, or not specified
CVE-2026-21043
6.7
0%
Jul 10
Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system server privilege
Affected: All versions, or not specified
CVE-2026-21018
6.7
0%
May 13
Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code
Affected: All versions, or not specified
CVE-2026-20968
6.7
0%
Jan 9
Use after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to execute arbitrary code
Affected: All versions, or not specified
CVE-2026-20981
6.6
0%
Feb 4
Improper input validation in FacAtFunction prior to SMR Feb-2026 Release 1 allows privileged physical attacker to execute arbitrary command with system privilege
Affected: All versions, or not specified
CVE-2026-21061
6.5
0%
Aug 10
Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions
Affected: All versions, or not specified
CVE-2026-21008
6.5
0%
Apr 13
Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information
Affected: All versions, or not specified
CVE-2025-58477
6.5
0%
Dec 2
Out-of-bounds write in parsing IFD tag in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory
Affected: All versions, or not specified
CVE-2026-21103
6.1
0%
Sep 9
Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege
Affected: All versions, or not specified
CVE-2026-21098
6.1
0%
Sep 9
Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction
Affected: All versions, or not specified
CVE-2026-21073
6.1
0%
Aug 10
Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity
Affected: All versions, or not specified
CVE-2026-21063
6.1
0%
Aug 10
Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function
Affected: All versions, or not specified
CVE-2026-20978
6.1
0%
Feb 4
Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persistence configuration of the application
Affected: All versions, or not specified
CVE-2022-33727
6.1
0%
Aug 5
A vulnerable code in onCreate of SecDevicePickerDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth device via…
Affected: Q(10), R(11), S(12) before SMR Aug-2022 Release 1
CVE-2022-33723
6.1
0%
Aug 5
A vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth device via…
Affected: Q(10), R(11), S(12) before SMR Aug-2022 Release 1
CVE-2026-20982
6.0
0%
Feb 4
Path traversal in ShortcutService prior to SMR Feb-2026 Release 1 allows privileged local attacker to create file with system privilege
Affected: All versions, or not specified
CVE-2026-21044
5.8
0%
Jul 10
Improper authorization in KnoxGuardManager prior to SMR Jul-2026 Release 1 allows local attackers to bypass the persistence configuration of the application
Affected: All versions, or not specified
CVE-2026-21099
5.5
0%
Sep 9
Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information
Affected: All versions, or not specified
CVE-2026-21064
5.5
0%
Aug 10
Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability
Affected: All versions, or not specified
CVE-2026-21028
5.5
0%
Jun 5
Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information
Affected: All versions, or not specified
CVE-2026-21026
5.5
0%
Jun 5
Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to sensitive information
Affected: All versions, or not specified
Page 1 of 2 · 92 total