SM
Product
Samsung Mobile Devices
On CISA KEVExploited in the wild
179
CVEs
13
On KEV
9.8
Max CVSS
14
New 30D
Severity mix
Critical 7High 52Medium 92Low 28
Watch
Add Samsung Mobile Devices to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-25372 In wildKEV | 6.7 | Mar 26 | Samsung Mobile Devices Improper Boundary Check Vulnerability Affected: Q(10.0), R(11.0) devices with exynos980, exynos2100, exynos9830 before SMR Mar-2021 Release 1 |
| CVE-2021-25371 In wildKEV | 6.7 | Mar 26 | Samsung Mobile Devices Unspecified Vulnerability Affected: Q(10.0), R(11.0) devices with exynos980, exynos2100, exynos9830 before SMR Mar-2021 Release 1 |
| CVE-2021-25394 In wildKEV | 6.4 | Jun 11 | Samsung Mobile Devices Race Condition Vulnerability Affected: O(8.x), P(9.0), Q(10.0), R(11.0) before SMR MAY-2021 Release 1 |
| CVE-2021-25395 In wildKEV | 6.4 | Jun 11 | Samsung Mobile Devices Race Condition Vulnerability Affected: O(8.x), P(9.0), Q(10.0), R(11.0) before SMR MAY-2021 Release 1 |
| CVE-2021-25489 In wildKEV | 5.5 | Oct 6 | Samsung Mobile Devices Improper Input Validation Vulnerability Affected: O(8.1), P(9.0), Q(10.0), R(11.0) before SMR Oct-2021 Release 1 |
| CVE-2021-25369 In wildKEV | 5.5 | Mar 26 | Samsung Mobile Devices Improper Access Control Vulnerability Affected: O(8.x), P(9.0), Q(10.0) before SMR Mar-2021 Release 1 |
| CVE-2023-21492 In wildKEV | 4.4 | May 4 | Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability Affected: Selected Android 11, 12, 13 devices before SMR May-2023 Release 1 |
| CVE-2021-25370 In wildKEV | 4.4 | Mar 26 | Samsung Mobile Devices Memory Corruption Vulnerability Affected: Selected O(8.X), P(9.0), Q(10.0), R(11.0) before SMR Mar-2021 Release 1 |
| CVE-2026-21126 | 6.9 | Oct 12 | Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21121 | 6.9 | Oct 12 | Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs Affected: All versions, or not specified |
| CVE-2026-21118 | 6.9 | Oct 12 | Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage Affected: All versions, or not specified |
| CVE-2026-21140 | 6.9 | Oct 2 | Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications Affected: All versions, or not specified |
| CVE-2026-21041 | 6.9 | Jul 10 | Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information Affected: All versions, or not specified |
| CVE-2026-21040 | 6.9 | Jul 10 | Improper access control in IAFDService prior to SMR Jul-2026 Release 1 allows local privileged attackers to use the privileged APIs Affected: All versions, or not specified |
| CVE-2026-21039 | 6.9 | Jul 10 | Improper access control in Settings prior to SMR Jul-2026 Release 1 allows local attackers to configure Theft protection settings Affected: All versions, or not specified |
| CVE-2026-21052 | 6.8 | Jul 10 | Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privilege Affected: All versions, or not specified |
| CVE-2026-21021 | 6.8 | May 13 | Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity Affected: All versions, or not specified |
| CVE-2026-21011 | 6.8 | Apr 13 | Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock Affected: All versions, or not specified |
| CVE-2026-21009 | 6.8 | Apr 13 | Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning Affected: All versions, or not specified |
| CVE-2026-21007 | 6.8 | Apr 13 | Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard Affected: All versions, or not specified |
| CVE-2026-21003 | 6.8 | Apr 13 | Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restrictions Affected: All versions, or not specified |
| CVE-2026-20980 | 6.8 | Feb 4 | Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary commands Affected: All versions, or not specified |
| CVE-2022-33730 | 6.8 | Aug 5 | Heap-based buffer overflow vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows arbitrary code execution by physical attackers Affected: S(12) before SMR Aug-2022 Release 1 |
| CVE-2026-21123 | 6.7 | Oct 12 | Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before… Affected: All versions, or not specified |
| CVE-2026-21104 | 6.7 | Sep 9 | Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code Affected: All versions, or not specified |
| CVE-2026-21102 | 6.7 | Sep 9 | Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege Affected: All versions, or not specified |
| CVE-2026-21101 | 6.7 | Sep 9 | Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege Affected: All versions, or not specified |
| CVE-2026-21097 | 6.7 | Sep 9 | Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity Affected: All versions, or not specified |
| CVE-2026-21093 | 6.7 | Sep 9 | Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21085 | 6.7 | Sep 9 | Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21043 | 6.7 | Jul 10 | Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system server privilege Affected: All versions, or not specified |
| CVE-2026-21018 | 6.7 | May 13 | Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code Affected: All versions, or not specified |
| CVE-2026-20968 | 6.7 | Jan 9 | Use after free in DualDAR prior to SMR Jan-2026 Release 1 allows local privileged attackers to execute arbitrary code Affected: All versions, or not specified |
| CVE-2026-20981 | 6.6 | Feb 4 | Improper input validation in FacAtFunction prior to SMR Feb-2026 Release 1 allows privileged physical attacker to execute arbitrary command with system privilege Affected: All versions, or not specified |
| CVE-2026-21061 | 6.5 | Aug 10 | Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions Affected: All versions, or not specified |
| CVE-2026-21008 | 6.5 | Apr 13 | Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information Affected: All versions, or not specified |
| CVE-2025-58477 | 6.5 | Dec 2 | Out-of-bounds write in parsing IFD tag in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory Affected: All versions, or not specified |
| CVE-2026-21103 | 6.1 | Sep 9 | Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege Affected: All versions, or not specified |
| CVE-2026-21098 | 6.1 | Sep 9 | Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction Affected: All versions, or not specified |
| CVE-2026-21073 | 6.1 | Aug 10 | Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity Affected: All versions, or not specified |
| CVE-2026-21063 | 6.1 | Aug 10 | Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function Affected: All versions, or not specified |
| CVE-2026-20978 | 6.1 | Feb 4 | Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persistence configuration of the application Affected: All versions, or not specified |
| CVE-2022-33727 | 6.1 | Aug 5 | A vulnerable code in onCreate of SecDevicePickerDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth device via… Affected: Q(10), R(11), S(12) before SMR Aug-2022 Release 1 |
| CVE-2022-33723 | 6.1 | Aug 5 | A vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an unwanted bluetooth device via… Affected: Q(10), R(11), S(12) before SMR Aug-2022 Release 1 |
| CVE-2026-20982 | 6.0 | Feb 4 | Path traversal in ShortcutService prior to SMR Feb-2026 Release 1 allows privileged local attacker to create file with system privilege Affected: All versions, or not specified |
| CVE-2026-21044 | 5.8 | Jul 10 | Improper authorization in KnoxGuardManager prior to SMR Jul-2026 Release 1 allows local attackers to bypass the persistence configuration of the application Affected: All versions, or not specified |
| CVE-2026-21099 | 5.5 | Sep 9 | Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information Affected: All versions, or not specified |
| CVE-2026-21064 | 5.5 | Aug 10 | Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability Affected: All versions, or not specified |
| CVE-2026-21028 | 5.5 | Jun 5 | Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information Affected: All versions, or not specified |
| CVE-2026-21026 | 5.5 | Jun 5 | Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to sensitive information Affected: All versions, or not specified |
