Vulnerabilidades de Samsung Mobile
CVEs publicadas que afetam produtos de Samsung Mobile: 237 registro(s), com severidade, exploração e correções.
Samsung Mobile Devices 144Smart Switch 19Samsung Notes 7Samsung Health 5Samsung Account 5Galaxy Store 4Samsung Internet 4Samsung Members 3Samsung Assistant 3Samsung Checkout 3Samsung Flow 3Galaxy Wearable 2Samsung Email 2Retail Mode 2Bixby 2Samsung Cloud Assistant 2MotionPhoto 2Libsavscmn.so 1Watch Plugin 1Visual Voicemail 1Bixby Touch 1Collection 1SmartThings 1SamsungPassAutofill 1My Galaxy 1Samsung Pass 1Samsung Tips 1InputSharing 1Libsthmbc 1Samsung Voice Recorder 1Routines 1SmartTouchCall 1Galaxy Store for Galaxy Watch 1Samsung Camera 1Samsung Plus TV 1Samsung Android USB Driver for Windows 1Samsung Auto 1Samsung Cloud 1GalaxyDiagnostics 1Samsung System Support Service 1
CVE-2026-21065
Alta · 7.8
CWE-20 10/08/2026
Improper Input Validation em Samsung Android
Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21064
Média · 5.5
CWE-284 10/08/2026
Improper Access Control em Samsung Android
Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability.
CVE-2026-21063
Média · 6.1
CWE-926 10/08/2026
Improper export of android application components in AppLock prior to SMR Aug-2026…
Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function.
CVE-2026-21062
Baixa · 3.3
CWE-939 10/08/2026
Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local…
Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.
CVE-2026-21061
Média · 6.5
CWE-20 10/08/2026
Improper Input Validation em Samsung Android
Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering this vulnerability.
CVE-2026-21060
Média · 4.6
CWE-20 10/08/2026
Improper Input Validation em Samsung Android
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles.
CVE-2026-21059
Alta · 7.1
CWE-926 10/08/2026
Improper export of android application components in Samsung Contacts prior to SMR…
Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.
CVE-2026-21058
Alta · 7.1
CWE-20 10/08/2026
Improper Input Validation em Samsung Android
Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.
CVE-2026-21047
Alta · 8.3
CWE-787 28/07/2026
Out-of-bounds Write em Samsung Mobile Samsung Mobile Devices
Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitrary code.
CVE-2026-21057
Média · 6.8
10/07/2026
Improper input validation in Samsung Pass prior to version 5.2.10.3 allows local…
Improper input validation in Samsung Pass prior to version 5.2.10.3 allows local privileged attackers to write out-of-bounds memory.
CVE-2026-21056
Média · 4.8
10/07/2026
Improper authorization in Samsung Health prior to version 7.00.0.107 allows local…
Improper authorization in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information.
CVE-2026-21055
Alta · 8.5
10/07/2026
Improper export of android application components in Bixby prior to version 4.0.70.8…
Improper export of android application components in Bixby prior to version 4.0.70.8 allows local attackers to execute arbitrary commands with Bixby privilege.
CVE-2026-21054
Média · 6.9
10/07/2026
Improper export of android application components in InputSharing prior to version…
Improper export of android application components in InputSharing prior to version 2.7.01.4 allows local attackers to access sharing data.
CVE-2026-21053
Média · 5.1
10/07/2026
Improper input validation in Samsung Email prior to version 6.2.13.1 allows local…
Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox.
CVE-2026-21052
Média · 6.8
10/07/2026
Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local…
Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system privilege.
CVE-2026-21051
Média · 5.1
10/07/2026
Incorrect default permissions in WLAN security prior to SMR Jul-2026 Release 1 allows…
Incorrect default permissions in WLAN security prior to SMR Jul-2026 Release 1 allows local attackers to configure TencentWifiSecurity settings.
CVE-2026-21050
Média · 5.1
10/07/2026
Improper access control in SmartThingsKit prior to SMR Jul-2026 Release 1 allows local…
Improper access control in SmartThingsKit prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21049
Alta · 8.4
10/07/2026
Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local…
Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary code.
CVE-2026-21048
Alta · 8.3
10/07/2026
Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR…
Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory.
CVE-2026-21046
Alta · 8.4
10/07/2026
Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR…
Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privileged attackers to execute arbitrary code.
CVE-2026-21045
Alta · 8.3
10/07/2026
Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR…
Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory.
CVE-2026-21044
Média · 5.8
10/07/2026
Improper authorization in KnoxGuardManager prior to SMR Jul-2026 Release 1 allows local…
Improper authorization in KnoxGuardManager prior to SMR Jul-2026 Release 1 allows local attackers to bypass the persistence configuration of the application.
CVE-2026-21043
Média · 6.7
10/07/2026
Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local…
Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system server privilege.
CVE-2026-21042
Alta · 8.7
10/07/2026
Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows remote…
Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows remote attackers to execute arbitrary code.
CVE-2026-21041
Média · 6.9
10/07/2026
Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows…
Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information.