Samsung vulnerabilities
Published CVEs affecting Samsung products: 293 record(s), with severity, exploitation and fixes.
Android 114Exynos 1380 Firmware 49Exynos 1480 Firmware 45Exynos 1330 Firmware 43Exynos 1280 Firmware 43Exynos 1580 Firmware 42Exynos 850 Firmware 36Exynos 980 Firmware 32Exynos W930 Firmware 31Exynos W920 Firmware 31Exynos 2400 Firmware 31Exynos 1080 Firmware 29Exynos W1000 Firmware 28Exynos 2200 Firmware 26Exynos 2500 Firmware 21Escargot 18Exynos 990 Firmware 17Smart Switch 16Exynos 2100 Firmware 15Exynos 9110 Firmware 14One 9Exynos Modem 5123 Firmware 9Exynos Modem 5300 Firmware 8Exynos Modem 5400 Firmware 8Notes 7Modem 5123 Firmware 7Rlottie 6Modem 5400 Firmware 6Magicinfo 9 Server 5Galaxy Store 5Account 4Health 4Members 4Assistant 3Modem 5300 Firmware 3Internet 2Motionphoto 2Walrus 2Exynos 9820 Firmware 1Exynos 8890 firmware 1
CVE-2026-21037
High · 7.1
Jun 5, 2026
Improper input validation in Samsung Members prior to version 5.8.01.5 allows local…
Improper input validation in Samsung Members prior to version 5.8.01.5 allows local attackers to access arbitrary URL and launch arbitrary activity with Samsung Members privilege.
CVE-2026-21036
Medium · 5.5
CWE-863 Jun 5, 2026
Incorrect Authorization in Samsung Internet
Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information.
CVE-2026-21035
High · 7.5
Jun 5, 2026
Improper input validation in Samsung Plus TV prior to version 1.0.28.6 allows remote…
Improper input validation in Samsung Plus TV prior to version 1.0.28.6 allows remote attackers to access sensitive information.
CVE-2026-21034
Low · 3.3
Jun 5, 2026
Improper export of android application components in Samsung Auto prior to version…
Improper export of android application components in Samsung Auto prior to version 3.1.2.61 in Android 15 and 3.2.0.38 in Android 16 allows local attacker to change audio configuration.
CVE-2026-21033
High · 7.1
Jun 5, 2026
Improper export of android application components in ExpressHomeWidgetReceiver of…
Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script.
CVE-2026-21032
High · 7.1
Jun 5, 2026
Improper export of android application components in SmartHomeWidgetReceiver of Samsung…
Improper export of android application components in SmartHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script.
CVE-2026-21031
High · 7.8
CWE-863 Jun 5, 2026
Incorrect Authorization in Samsung Android
Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is required for triggering this vulnerability.
CVE-2026-21030
High · 7.8
Jun 5, 2026
Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows…
Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions.
CVE-2026-21029
High · 7.8
Jun 5, 2026
Improper export of android application components in Galaxy Editing Service prior to SMR…
Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows local attacker to execute privileged operations.
CVE-2026-21028
Medium · 5.5
Jun 5, 2026
Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local…
Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21027
Low · 3.3
Jun 5, 2026
Improper export of android application components in ImsSettings prior to SMR Jun-2026…
Improper export of android application components in ImsSettings prior to SMR Jun-2026 Release 1 allows local attackers to trigger logging function.
CVE-2026-21026
Medium · 5.5
Jun 5, 2026
Improper export of android application components in SpriteWallpaper prior to SMR…
Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to sensitive information.
CVE-2026-21025
Medium · 5.5
Jun 5, 2026
Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local…
Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21017
Medium · 5.5
Jun 5, 2026
Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR…
Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privileged files.
CVE-2026-8915
High · 8.8
CWE-787 May 27, 2026
Out-of-bounds Write in Samsung Escargot
Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.
This issue affects Escargot: 36f5fb58366a67b713c02f6fd985e924fcc09e31.
CVE-2026-47317
High · 7.5
CWE-674 May 19, 2026
Uncontrolled Recursion in Samsung Escargot
Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Excessive Allocation.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47316
High · 7.5
CWE-703 May 19, 2026
Improper Check or Handling of Exceptional Conditions in Samsung Escargot
Improper Check or Handling of Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47315
High · 7.5
CWE-754 May 19, 2026
Improper Check for Unusual or Exceptional Conditions in Samsung Escargot
Improper Check for Unusual or Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47314
Critical · 9.8
CWE-787 May 19, 2026
Out-of-bounds Write in Samsung Escargot
Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47313
High · 7.5
CWE-789 May 19, 2026
Memory allocation with excessive size value vulnerability in Samsung Open Source…
Memory allocation with excessive size value vulnerability in Samsung Open Source Escargot allows Excessive Allocation.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47312
High · 7.5
CWE-763 May 19, 2026
Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot…
Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot allows Buffer Manipulation.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47311
Critical · 9.8
CWE-122 May 19, 2026
Heap-based Buffer Overflow in Samsung Escargot
Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47310
Critical · 9.8
CWE-416 May 19, 2026
Use After Free in Samsung Escargot
Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47309
High · 7.5
CWE-674 May 19, 2026
Uncontrolled Recursion in Samsung Escargot
Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Oversized Serialized Data Payloads.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47308
High · 7.5
CWE-476 May 19, 2026
NULL Pointer Dereference in Samsung Walrus
NULL pointer dereference vulnerability in Samsung Open Source Walrus allows Pointer Manipulation.
This issue affects Walrus: f339b8ee4ea701772e8ae640b3d1b12ac02b1ae9.