Summary
Ein Angreifer kann mehrere Schwachstellen in Samsung Android ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, um Informationen offenzulegen, um Sicherheitsvorkehrungen zu umgehen, und um beliebigen Programmcode auszuführen.
Product
Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.
Vulnerabilities 7
-
High 8.9CVE-2026-21019 Public exploit
Improper input validation in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 allows local attacker to exe…
-
Medium 6.9
Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 allows local attackers to acc…
-
Medium 6.8CVE-2026-21015 Public exploit
Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker to access unique i…
-
Medium 6.8CVE-2026-21018 Public exploit
Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrar…
-
Medium 5.1CVE-2026-21016 Public exploit
Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sens…
-
Medium 5.1CVE-2026-21020 Public exploit
Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to tr…
-
Medium 5.1
Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged ac…
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2026-29903, EUVD-2026-29904, EUVD-2026-29906, EUVD-2026-29905
-
#1
Initiale Fassung
References
-
Samsung Security Updates May 2026 vom 2026-05-05
https://security.samsungmobile.com/securityUpdate.smsb