Vulnerabilidades de Samsung
CVEs publicadas que afetam produtos de Samsung: 293 registro(s), com severidade, exploração e correções.
Android 114Exynos 1380 Firmware 49Exynos 1480 Firmware 45Exynos 1330 Firmware 43Exynos 1280 Firmware 43Exynos 1580 Firmware 42Exynos 850 Firmware 36Exynos 980 Firmware 32Exynos W930 Firmware 31Exynos W920 Firmware 31Exynos 2400 Firmware 31Exynos 1080 Firmware 29Exynos W1000 Firmware 28Exynos 2200 Firmware 26Exynos 2500 Firmware 21Escargot 18Exynos 990 Firmware 17Smart Switch 16Exynos 2100 Firmware 15Exynos 9110 Firmware 14One 9Exynos Modem 5123 Firmware 9Exynos Modem 5300 Firmware 8Exynos Modem 5400 Firmware 8Notes 7Modem 5123 Firmware 7Rlottie 6Modem 5400 Firmware 6Magicinfo 9 Server 5Galaxy Store 5Account 4Health 4Members 4Assistant 3Modem 5300 Firmware 3Internet 2Motionphoto 2Walrus 2Exynos 9820 Firmware 1Exynos 8890 firmware 1
CVE-2026-21037
Alta · 7.1
05/06/2026
Improper input validation in Samsung Members prior to version 5.8.01.5 allows local…
Improper input validation in Samsung Members prior to version 5.8.01.5 allows local attackers to access arbitrary URL and launch arbitrary activity with Samsung Members privilege.
CVE-2026-21036
Média · 5.5
CWE-863 05/06/2026
Incorrect Authorization em Samsung Internet
Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information.
CVE-2026-21035
Alta · 7.5
05/06/2026
Improper input validation in Samsung Plus TV prior to version 1.0.28.6 allows remote…
Improper input validation in Samsung Plus TV prior to version 1.0.28.6 allows remote attackers to access sensitive information.
CVE-2026-21034
Baixa · 3.3
05/06/2026
Improper export of android application components in Samsung Auto prior to version…
Improper export of android application components in Samsung Auto prior to version 3.1.2.61 in Android 15 and 3.2.0.38 in Android 16 allows local attacker to change audio configuration.
CVE-2026-21033
Alta · 7.1
05/06/2026
Improper export of android application components in ExpressHomeWidgetReceiver of…
Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script.
CVE-2026-21032
Alta · 7.1
05/06/2026
Improper export of android application components in SmartHomeWidgetReceiver of Samsung…
Improper export of android application components in SmartHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacker to execute arbitrary script.
CVE-2026-21031
Alta · 7.8
CWE-863 05/06/2026
Incorrect Authorization em Samsung Android
Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is required for triggering this vulnerability.
CVE-2026-21030
Alta · 7.8
05/06/2026
Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows…
Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions.
CVE-2026-21029
Alta · 7.8
05/06/2026
Improper export of android application components in Galaxy Editing Service prior to SMR…
Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows local attacker to execute privileged operations.
CVE-2026-21028
Média · 5.5
05/06/2026
Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local…
Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21027
Baixa · 3.3
05/06/2026
Improper export of android application components in ImsSettings prior to SMR Jun-2026…
Improper export of android application components in ImsSettings prior to SMR Jun-2026 Release 1 allows local attackers to trigger logging function.
CVE-2026-21026
Média · 5.5
05/06/2026
Improper export of android application components in SpriteWallpaper prior to SMR…
Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to sensitive information.
CVE-2026-21025
Média · 5.5
05/06/2026
Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local…
Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.
CVE-2026-21017
Média · 5.5
05/06/2026
Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR…
Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privileged files.
CVE-2026-8915
Alta · 8.8
CWE-787 27/05/2026
Out-of-bounds Write em Samsung Escargot
Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.
This issue affects Escargot: 36f5fb58366a67b713c02f6fd985e924fcc09e31.
CVE-2026-47317
Alta · 7.5
CWE-674 19/05/2026
Uncontrolled Recursion em Samsung Escargot
Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Excessive Allocation.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47316
Alta · 7.5
CWE-703 19/05/2026
Improper Check or Handling of Exceptional Conditions em Samsung Escargot
Improper Check or Handling of Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47315
Alta · 7.5
CWE-754 19/05/2026
Improper Check for Unusual or Exceptional Conditions em Samsung Escargot
Improper Check for Unusual or Exceptional Conditions vulnerability in Samsung Open Source Escargot allows Input Data Manipulation.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47314
Crítica · 9.8
CWE-787 19/05/2026
Out-of-bounds Write em Samsung Escargot
Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47313
Alta · 7.5
CWE-789 19/05/2026
Memory allocation with excessive size value vulnerability in Samsung Open Source…
Memory allocation with excessive size value vulnerability in Samsung Open Source Escargot allows Excessive Allocation.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47312
Alta · 7.5
CWE-763 19/05/2026
Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot…
Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot allows Buffer Manipulation.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47311
Crítica · 9.8
CWE-122 19/05/2026
Heap-based Buffer Overflow em Samsung Escargot
Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47310
Crítica · 9.8
CWE-416 19/05/2026
Use After Free em Samsung Escargot
Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47309
Alta · 7.5
CWE-674 19/05/2026
Uncontrolled Recursion em Samsung Escargot
Uncontrolled Recursion vulnerability in Samsung Open Source Escargot allows Oversized Serialized Data Payloads.
This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3.
CVE-2026-47308
Alta · 7.5
CWE-476 19/05/2026
NULL Pointer Dereference em Samsung Walrus
NULL pointer dereference vulnerability in Samsung Open Source Walrus allows Pointer Manipulation.
This issue affects Walrus: f339b8ee4ea701772e8ae640b3d1b12ac02b1ae9.