CVE Intelligence

Vulnerabilidades do Samsung Android

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Samsung Android: 114 registro(s), com versões afetadas e correções.
cpe:2.3:o:samsung:android

CVE-2026-21015 Média · 5.5 CWE-276 13/05/2026
Incorrect Default Permissions em Samsung Android
Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker to access unique identifier.
CVE-2026-21023 Média · 5.5 29/04/2026
Insufficient verification of data authenticity in PackageManagerService prior to SMR…
Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction of specific application.
CVE-2026-21012 Baixa · 3.3 13/04/2026
External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows…
External control of file name in AODManager prior to SMR Apr-2026 Release 1 allows privileged local attacker to create file with system privilege.
CVE-2026-21011 Média · 6.8 CWE-732 13/04/2026
Incorrect Permission Assignment for Critical Resource em Samsung Android
Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock.
CVE-2026-21010 Alta · 7.8 13/04/2026
Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local…
Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions.
CVE-2026-21009 Média · 6.8 CWE-754 13/04/2026
Improper Check for Unusual or Exceptional Conditions em Samsung Android
Improper check for exceptional conditions in Recents prior to SMR Apr-2026 Release 1 allows physical attacker to bypass App Pinning.
CVE-2026-21008 Média · 6.5 13/04/2026
Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows…
Exposure of sensitive information in S Share prior to SMR Apr-2026 Release 1 allows adjacent attacker to access sensitive information.
CVE-2026-21007 Média · 6.8 CWE-754 13/04/2026
Improper Check for Unusual or Exceptional Conditions em Samsung Android
Improper check for exceptional conditions in Device Care prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Knox Guard.
CVE-2026-21006 Baixa · 2.4 13/04/2026
Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical…
Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents.
CVE-2026-21003 Média · 6.8 13/04/2026
Improper input validation in data related to network restrictions prior to SMR Apr-2026…
Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restrictions.
CVE-2026-20992 Baixa · 3.3 CWE-863 16/03/2026
Incorrect Authorization em Samsung Android
Improper authorization in Settings prior to SMR Mar-2026 Release 1 allows local attacker to disable configuring the background data usage of application.
CVE-2026-20991 Média · 4.4 16/03/2026
Improper privilege management in ThemeManager prior to SMR Mar-2026 Release 1 allows…
Improper privilege management in ThemeManager prior to SMR Mar-2026 Release 1 allows local privileged attackers to reuse trial contents.
CVE-2026-20990 Alta · 8.1 16/03/2026
Improper export of android application components in Secure Folder prior to SMR Mar-2026…
Improper export of android application components in Secure Folder prior to SMR Mar-2026 Release 1 allows local attackers to launch arbitrary activity with Secure Folder privilege.
CVE-2026-20989 Baixa · 2.4 CWE-347 16/03/2026
Improper Verification of Cryptographic Signature em Samsung Android
Improper verification of cryptographic signature in Font Settings prior to SMR Mar-2026 Release 1 allows physical attackers to use custom font.
CVE-2026-20988 Média · 5.0 16/03/2026
Improper verification of intent by broadcast receiver in Settings prior to SMR Mar-2026…
Improper verification of intent by broadcast receiver in Settings prior to SMR Mar-2026 Release 1 allows local attacker to launch arbitrary activity with Settings privilege. User interaction is required for triggering this vulnerability.
CVE-2026-20983 Alta · 7.8 04/02/2026
Improper export of android application components in Samsung Dialer prior to SMR…
Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Samsung Dialer privilege.
CVE-2026-20982 Média · 6.0 CWE-22 04/02/2026
Path Traversal em Samsung Android
Path traversal in ShortcutService prior to SMR Feb-2026 Release 1 allows privileged local attacker to create file with system privilege.
CVE-2026-20981 Média · 6.6 04/02/2026
Improper input validation in FacAtFunction prior to SMR Feb-2026 Release 1 allows…
Improper input validation in FacAtFunction prior to SMR Feb-2026 Release 1 allows privileged physical attacker to execute arbitrary command with system privilege.
CVE-2026-20980 Média · 6.8 04/02/2026
Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical…
Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary commands.
CVE-2026-20979 Alta · 7.8 04/02/2026
Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local…
Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings privilege.
CVE-2026-20978 Média · 6.1 04/02/2026
Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local…
Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persistence configuration of the application.
CVE-2026-20977 Média · 5.5 04/02/2026
Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows…
Improper access control in Emergency Sharing prior to SMR Feb-2026 Release 1 allows local attackers to interrupt its functioning.
CVE-2026-20974 Média · 4.6 09/01/2026
Improper input validation in data related to network restrictions prior to SMR Jan-2026…
Improper input validation in data related to network restrictions prior to SMR Jan-2026 Release 1 allows physical attackers to bypass Carrier Relock.
CVE-2026-20973 Crítica · 9.1 CWE-125 09/01/2026
Out-of-bounds Read em Samsung Android
Out-of-bounds read in libimagecodec.quram.so prior to SMR Jan-2026 Release 1 allows remote attacker to access out-of-bounds memory.
CVE-2026-20972 Baixa · 3.3 09/01/2026
Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026…
Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows local attackers to enable UWB.