SM
Vendor
Samsung Mobile
242
CVEs
13
On KEV
27
New 30D
Products
SM9.8
Samsung Mobile Devices
Samsung Mobile
152 CVEs13 on KEV14 new
SS6.9
Smart Switch
Samsung Mobile
7 CVEs0 on KEV3 new
SC5.5
Samsung Checkout
Samsung Mobile
5 CVEs0 on KEV3 new
SF6.1
Samsung Flow
Samsung Mobile
3 CVEs0 on KEV3 new
SI6.0
Samsung Internet
Samsung Mobile
4 CVEs0 on KEV2 new
SA6.9
Samsung Account
Samsung Mobile
4 CVEs0 on KEV1 new
SC7.3
Samsung Continuity Service for windows
Samsung Mobile
1 CVEs0 on KEV1 new
SM7.5
SmartThings
Samsung Mobile
9 CVEs0 on KEV0 new
SN9.8
Samsung notes
Samsung Mobile
6 CVEs0 on KEV0 new
CB5.5
Charm by Samsung
Samsung Mobile
5 CVEs0 on KEV0 new
SH5.5
Samsung Health
Samsung Mobile
4 CVEs0 on KEV0 new
SA7.1
Samsung Assistant
Samsung Mobile
3 CVEs0 on KEV0 new
BI8.5
Bixby
Samsung Mobile
2 CVEs0 on KEV0 new
FA7.8
FactoryCamera
Samsung Mobile
2 CVEs0 on KEV0 new
GW5.5
Galaxy Wearable
Samsung Mobile
2 CVEs0 on KEV0 new
GS5.3
Group Sharing
Samsung Mobile
2 CVEs0 on KEV0 new
SE5.5
Samsung email
Samsung Mobile
2 CVEs0 on KEV0 new
BT5.5
Bixby Touch
Samsung Mobile
1 CVEs0 on KEV0 new
CA3.3
Cameralyzer
Samsung Mobile
1 CVEs0 on KEV0 new
CO5.5
Collection
Samsung Mobile
1 CVEs0 on KEV0 new
EX7.8
Exynos
Samsung Mobile
1 CVEs0 on KEV0 new
FA5.5
FactoryCameraFB
Samsung Mobile
1 CVEs0 on KEV0 new
GL5.0
Game Launcher
Samsung Mobile
1 CVEs0 on KEV0 new
GO7.8
Game Optimizing Service
Samsung Mobile
1 CVEs0 on KEV0 new
IN6.9
InputSharing
Samsung Mobile
1 CVEs0 on KEV0 new
LI6.9
libsavscmn.so
Samsung Mobile
1 CVEs0 on KEV0 new
LI6.9
libsthmbc
Samsung Mobile
1 CVEs0 on KEV0 new
MG5.3
My Galaxy
Samsung Mobile
1 CVEs0 on KEV0 new
QU3.5
QuickShare
Samsung Mobile
1 CVEs0 on KEV0 new
RE3.3
Reminder
Samsung Mobile
1 CVEs0 on KEV0 new
SA5.5
Samsung Android USB Driver for Windows
Samsung Mobile
1 CVEs0 on KEV0 new
SA3.3
Samsung Auto
Samsung Mobile
1 CVEs0 on KEV0 new
SC2.8
Samsung Camera
Samsung Mobile
1 CVEs0 on KEV0 new
SC5.1
Samsung Cloud Assistant
Samsung Mobile
1 CVEs0 on KEV0 new
SI3.3
Samsung Internet Browser
Samsung Mobile
1 CVEs0 on KEV0 new
SM7.1
Samsung Members
Samsung Mobile
1 CVEs0 on KEV0 new
SP6.8
Samsung Pass
Samsung Mobile
1 CVEs0 on KEV0 new
SP7.5
Samsung Plus TV
Samsung Mobile
1 CVEs0 on KEV0 new
SS6.3
Samsung System Support Service
Samsung Mobile
1 CVEs0 on KEV0 new
ST5.5
Samsung Tips
Samsung Mobile
1 CVEs0 on KEV0 new
SU7.8
Samsung Update Setup
Samsung Mobile
1 CVEs0 on KEV0 new
SA5.1
SamsungPassAutofill
Samsung Mobile
1 CVEs0 on KEV0 new
SH3.3
ShareLive
Samsung Mobile
1 CVEs0 on KEV0 new
UP3.3
UPHelper
Samsung Mobile
1 CVEs0 on KEV0 new
VV5.5
Visual Voicemail
Samsung Mobile
1 CVEs0 on KEV0 new
WP2.1
Watch Plugin
Samsung Mobile
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-21139 | SC Samsung Continuity Service for windows Samsung Mobile | 7.3 | Oct 12 | Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device |
| CVE-2026-21138 | SS Smart Switch Samsung Mobile | 6.9 | Oct 12 | Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications |
| CVE-2026-21137 | SS Smart Switch Samsung Mobile | 5.1 | Oct 12 | Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege |
| CVE-2026-21136 | SS Smart Switch Samsung Mobile | 6.8 | Oct 12 | Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process |
| CVE-2026-21135 | SI Samsung Internet Samsung Mobile | 5.9 | Oct 12 | Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information |
| CVE-2026-21134 | SF Samsung Flow Samsung Mobile | 6.1 | Oct 12 | Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information |
| CVE-2026-21133 | SF Samsung Flow Samsung Mobile | 5.1 | Oct 12 | Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data |
| CVE-2026-21132 | SI Samsung Internet Samsung Mobile | 6.0 | Oct 12 | Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script |
| CVE-2026-21131 | SF Samsung Flow Samsung Mobile | 2.1 | Oct 12 | Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device |
| CVE-2026-21130 | SC Samsung Checkout Samsung Mobile | 5.1 | Oct 12 | Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout… |
| CVE-2026-21129 | SC Samsung Checkout Samsung Mobile | 5.1 | Oct 12 | Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung… |
| CVE-2026-21128 | SC Samsung Checkout Samsung Mobile | 5.1 | Oct 12 | Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout… |
| CVE-2026-21127 | SA Samsung Account Samsung Mobile | 6.9 | Oct 12 | Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data |
| CVE-2026-21126 | SM Samsung Mobile Devices Samsung Mobile | 6.9 | Oct 12 | Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory |
| CVE-2026-21125 | SM Samsung Mobile Devices Samsung Mobile | 8.6 | Oct 12 | Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code |
| CVE-2026-21124 | SM Samsung Mobile Devices Samsung Mobile | 8.6 | Oct 12 | Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code |
| CVE-2026-21123 | SM Samsung Mobile Devices Samsung Mobile | 6.7 | Oct 12 | Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before… |
| CVE-2026-21122 | SM Samsung Mobile Devices Samsung Mobile | 7.0 | Oct 12 | Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code |
| CVE-2026-21121 | SM Samsung Mobile Devices Samsung Mobile | 6.9 | Oct 12 | Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs |
| CVE-2026-21120 | SM Samsung Mobile Devices Samsung Mobile | 8.9 | Oct 12 | Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege |
| CVE-2026-21119 | SM Samsung Mobile Devices Samsung Mobile | 4.8 | Oct 12 | Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory |
| CVE-2026-21118 | SM Samsung Mobile Devices Samsung Mobile | 6.9 | Oct 12 | Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage |
| CVE-2026-21117 | SM Samsung Mobile Devices Samsung Mobile | 5.1 | Oct 12 | Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information |
| CVE-2026-21116 | SM Samsung Mobile Devices Samsung Mobile | 5.1 | Oct 12 | Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory |
| CVE-2026-21115 | SM Samsung Mobile Devices Samsung Mobile | 5.1 | Oct 12 | Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory |
| CVE-2026-21114 | SM Samsung Mobile Devices Samsung Mobile | 7.0 | Oct 12 | Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code |
| CVE-2026-21140 | SM Samsung Mobile Devices Samsung Mobile | 6.9 | Oct 2 | Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications |
| CVE-2026-21113 | VV Visual Voicemail Samsung Mobile | 5.5 | Sep 9 | Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission |
| CVE-2026-21112 | ST Samsung Tips Samsung Mobile | 5.5 | Sep 9 | Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege |
| CVE-2026-21111 | LI libsthmbc Samsung Mobile | 6.9 | Sep 9 | Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory |
| CVE-2026-21110 | LI libsavscmn.so Samsung Mobile | 6.9 | Sep 9 | Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code |
| CVE-2026-21109 | WP Watch Plugin Samsung Mobile | 2.1 | Sep 9 | Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information |
| CVE-2026-21108 | BT Bixby Touch Samsung Mobile | 5.5 | Sep 9 | Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information |
| CVE-2026-21107 | SN Samsung Notes Samsung Mobile | 5.5 | Sep 9 | Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory |
| CVE-2026-21106 | SC Samsung Cloud Assistant Samsung Mobile | 5.1 | Sep 9 | Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings |
| CVE-2026-21105 | CO Collection Samsung Mobile | 5.5 | Sep 9 | Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information |
| CVE-2026-21104 | SM Samsung Mobile Devices Samsung Mobile | 6.7 | Sep 9 | Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code |
| CVE-2026-21103 | SM Samsung Mobile Devices Samsung Mobile | 6.1 | Sep 9 | Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege |
| CVE-2026-21102 | SM Samsung Mobile Devices Samsung Mobile | 6.7 | Sep 9 | Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege |
| CVE-2026-21101 | SM Samsung Mobile Devices Samsung Mobile | 6.7 | Sep 9 | Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege |
| CVE-2026-21100 | SM Samsung Mobile Devices Samsung Mobile | 7.1 | Sep 9 | Improper access control in SystemUI prior to SMR Sep-2026 Release 1 allows local attackers to launch arbitrary activity |
| CVE-2026-21099 | SM Samsung Mobile Devices Samsung Mobile | 5.5 | Sep 9 | Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information |
| CVE-2026-21098 | SM Samsung Mobile Devices Samsung Mobile | 6.1 | Sep 9 | Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction |
| CVE-2026-21097 | SM Samsung Mobile Devices Samsung Mobile | 6.7 | Sep 9 | Improper authentication in ActivityTaskManagerService prior to SMR Sep-2026 Release 1 allows local privileged attackers to launch arbitrary activity |
| CVE-2026-21096 | SM Samsung Mobile Devices Samsung Mobile | 9.8 | Sep 9 | Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code |
| CVE-2026-21095 | SM Samsung Mobile Devices Samsung Mobile | 9.8 | Sep 9 | Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbitrary code |
| CVE-2026-21094 | SM Samsung Mobile Devices Samsung Mobile | 8.8 | Sep 9 | Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory |
| CVE-2026-21093 | SM Samsung Mobile Devices Samsung Mobile | 6.7 | Sep 9 | Stack-based buffer overflow in PROCA trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory |
| CVE-2026-21092 | SM Samsung Mobile Devices Samsung Mobile | 5.3 | Sep 9 | Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege |
| CVE-2026-21091 | SM Samsung Mobile Devices Samsung Mobile | 7.8 | Sep 9 | Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory |
| CVE-2026-21090 | SM Samsung Mobile Devices Samsung Mobile | 7.8 | Sep 9 | Out-of-bounds write in libsaviextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory |
| CVE-2026-21089 | SM Samsung Mobile Devices Samsung Mobile | 7.8 | Sep 9 | Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory |
| CVE-2026-21088 | SM Samsung Mobile Devices Samsung Mobile | 7.8 | Sep 9 | Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory |
| CVE-2026-21087 | SM Samsung Mobile Devices Samsung Mobile | 7.8 | Sep 9 | Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privilege |
| CVE-2026-21086 | SM Samsung Mobile Devices Samsung Mobile | 7.8 | Sep 9 | Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration |
| CVE-2026-21085 | SM Samsung Mobile Devices Samsung Mobile | 6.7 | Sep 9 | Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory |
| CVE-2026-21084 | SM SmartThings Samsung Mobile | 6.9 | Aug 10 | Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information |
| CVE-2026-21083 | SS Smart Switch Samsung Mobile | 6.5 | Aug 10 | Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data |
| CVE-2026-21082 | SH Samsung Health Samsung Mobile | 5.5 | Aug 10 | Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information |
| CVE-2026-21081 | SA SamsungPassAutofill Samsung Mobile | 5.1 | Aug 10 | Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attackers to access sensitive information |