Samsung Android vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Samsung Android: 77 record(s), with affected versions and fixes.cpe:2.3:o:samsung:android
CVE-2026-21031
High · 7.8
CWE-863 Jun 5, 2026
Incorrect Authorization in Samsung Android
Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is required for triggering this vulnerability.
CVE-2026-21030
High · 7.8
Jun 5, 2026
Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows…
Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions.
CVE-2026-21029
High · 7.8
Jun 5, 2026
Improper export of android application components in Galaxy Editing Service prior to SMR…
Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows local attacker to execute privileged operations.
CVE-2026-21028
Medium · 5.5
Jun 5, 2026
Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local…
Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21027
Low · 3.3
Jun 5, 2026
Improper export of android application components in ImsSettings prior to SMR Jun-2026…
Improper export of android application components in ImsSettings prior to SMR Jun-2026 Release 1 allows local attackers to trigger logging function.
CVE-2026-21026
Medium · 5.5
Jun 5, 2026
Improper export of android application components in SpriteWallpaper prior to SMR…
Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to sensitive information.
CVE-2026-21025
Medium · 5.5
Jun 5, 2026
Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local…
Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21017
Medium · 5.5
Jun 5, 2026
Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR…
Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privileged files.
CVE-2026-21022
Medium · 5.5
May 13, 2026
Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release…
Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21021
Medium · 6.8
May 13, 2026
Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical…
Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity.
CVE-2026-21020
High · 7.8
May 13, 2026
Improper export of android application components in OmaCP prior to SMR May-2026 Release…
Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to trigger privileged functions.
CVE-2026-21018
Medium · 6.7
CWE-787 May 13, 2026
Out-of-bounds Write in Samsung Android
Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code.
CVE-2026-21016
Medium · 5.5
May 13, 2026
Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows…
Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21015
Medium · 5.5
CWE-276 May 13, 2026
Incorrect Default Permissions in Samsung Android
Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker to access unique identifier.
CVE-2026-21023
Medium · 5.5
Apr 29, 2026
Insufficient verification of data authenticity in PackageManagerService prior to SMR…
Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction of specific application.
CVE-2026-21012
Low · 3.3
Apr 13, 2026
External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows…
External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local attacker to create file with system privilege.
CVE-2026-21011
Medium · 6.8
CWE-732 Apr 13, 2026
Incorrect Permission Assignment for Critical Resource in Samsung Android
Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock.
CVE-2026-21010
High · 7.8
Apr 13, 2026
Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local…
Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions.
CVE-2026-21009
Medium · 6.8
CWE-754 Apr 13, 2026
Improper Check for Unusual or Exceptional Conditions in Samsung Android
Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning.
CVE-2026-21008
Medium · 6.5
Apr 13, 2026
Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows…
Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information.
CVE-2026-21007
Medium · 6.8
CWE-754 Apr 13, 2026
Improper Check for Unusual or Exceptional Conditions in Samsung Android
Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard.
CVE-2026-21006
Low · 2.4
Apr 13, 2026
Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical…
Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents.
CVE-2026-21003
Medium · 6.8
Apr 13, 2026
Improper input validation in data related to network restrictions prior to SMR Apr-2026…
Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restrictions.
CVE-2026-20992
Low · 3.3
CWE-863 Mar 16, 2026
Incorrect Authorization in Samsung Android
Improper authorization in Settings prior to SMR Mar-2026 Release 1 allows local attacker to disable configuring the background data usage of application.
CVE-2026-20991
Medium · 4.4
Mar 16, 2026
Improper privilege management in ThemeManager prior to SMR Mar-2026 Release 1 allows…
Improper privilege management in ThemeManager prior to SMR Mar-2026 Release 1 allows local privileged attackers to reuse trial contents.