Vendor
Samsung Mobile
1,419 known vulnerabilities.
Samsung Mobile at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 28 | 0 |
| Sep 2026 | 29 | 3 |
| Aug 2026 | 27 | 0 |
| Jul 2026 | 19 | 0 |
| Jun 2026 | 15 | 0 |
| May 2026 | 8 | 0 |
| Apr 2026 | 11 | 0 |
| Mar 2026 | 17 | 0 |
| Feb 2026 | 11 | 0 |
| Jan 2026 | 9 | 0 |
| Dec 2025 | 16 | 0 |
| Nov 2025 | 8 | 0 |
| Oct 2025 | 26 | 0 |
| Sep 2025 | 40 | 0 |
| Aug 2025 | 16 | 0 |
| Jul 2025 | 15 | 0 |
| Jun 2025 | 13 | 0 |
| May 2025 | 30 | 0 |
| Apr 2025 | 17 | 0 |
| Mar 2025 | 27 | 0 |
| Feb 2025 | 26 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 13 | 0 |
Most common weaknesses
Products
Samsung Mobile Devices 866
Samsung Notes 61
Galaxy Store 29
Samsung Internet 29
Samsung Account 29
Smart Switch 20
Samsung Pass 16
SmartThings 15
Samsung Health 15
Samsung Members 14
Samsung Email 13
Samsung Flow 11
Blockchain Keystore 7
Samsung Blockchain Keystore 7
Smart Things 6
Tizen wearable devices 6
Samsung Pay 6
S Assistant 5
Samsung Voice Recorder 5
Samsung Gallery 5
Group Sharing 5
Samsung Cloud 5
Galaxy Wearable 5
Samsung Wearable Devices 5
Samsung Checkout 5
Charm by Samsung 5
Samsung Assistant 5
Find My Mobile 4
Gallery 4
Bixby Vision 4
Bixby 4
Smart Switch PC 4
Samsung Mobile Devices with Exynos chipsets 4
Samsung Camera 4
libsavsvc.so 4
Samsung Calendar 3
Galaxy Watch PlugIn 3
FactoryCamera 3
Secure Folder 3
GamingHub 3
Latest advisories
-
High max 9.8
Kwetsbaarheden verholpen in Google Android en Samsung Mobile
Google heeft kwetsbaarheden verholpen in Android. In deze update zijn ook updates meegenomen voor closed-source componenten van Qualcomm, Imagination Technologies, Unisoc en MediaTek. Samsung heeft kwetsbaarheden in Samsung Mobile verholpen die relevant zijn …
1,419 results · Feed
-
High 8.3
Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary acti…
-
High 7.3
Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers…
-
Medium 6.9
Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to ins…
-
Medium 5.1
Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch priv…
-
Medium 6.8
Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore …
-
Medium 5.9
Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive inform…
-
Medium 6.1
Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive informa…
-
Medium 5.1
Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data.
-
Medium 6.0
Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary sc…
-
Low 2.1
Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary ac…
-
Medium 5.1
Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local atta…
-
Medium 5.1
Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local…
-
Medium 5.1
Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local atta…
-
Medium 6.9
Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers …
-
Medium 6.9
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 a…
-
High 8.6
Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows…
-
High 8.6
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 a…
-
Medium 6.7
Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with ro…
-
High 7.0
Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary cod…
-
Medium 6.9
Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use t…
-
High 8.9
Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary c…
-
Medium 4.8
Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to…
-
Medium 6.9
Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in s…
-
Medium 5.1
Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitiv…
-
Medium 5.1
Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bound…
-
Medium 5.1
Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-…
-
High 7.0
Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary …
-
Medium 6.9
Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitr…
-
Medium 4.8
Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attacker…
-
Medium 5.1
Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with …
-
Medium 6.9
Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory.
-
Medium 6.9
Out-of-bounds write in libsavscmn.so prior to One UI 8.5 allows local attackers to execute arbitrary code.
-
Low 2.1
Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive informatio…
-
Medium 6.9
Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to a…
-
Medium 6.9
Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory.
-
Medium 5.1
Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local at…
-
Medium 5.9
Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local a…
-
High 7.1
Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to e…
-
Medium 6.8
Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with syst…
-
Critical 9.3
Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code w…