Vendor
Samsung Mobile
1,419 known vulnerabilities.
Products
Samsung Mobile Devices 866
Samsung Notes 61
Galaxy Store 29
Samsung Internet 29
Samsung Account 29
Smart Switch 20
Samsung Pass 16
SmartThings 15
Samsung Health 15
Samsung Members 14
Samsung Email 13
Samsung Flow 11
Blockchain Keystore 7
Samsung Blockchain Keystore 7
Smart Things 6
Tizen wearable devices 6
Samsung Pay 6
S Assistant 5
Samsung Voice Recorder 5
Samsung Gallery 5
Group Sharing 5
Samsung Cloud 5
Galaxy Wearable 5
Samsung Wearable Devices 5
Samsung Checkout 5
Charm by Samsung 5
Samsung Assistant 5
Find My Mobile 4
Gallery 4
Bixby Vision 4
Bixby 4
Smart Switch PC 4
Samsung Mobile Devices with Exynos chipsets 4
Samsung Camera 4
libsavsvc.so 4
Samsung Calendar 3
Galaxy Watch PlugIn 3
FactoryCamera 3
Secure Folder 3
GamingHub 3
206 results · Clear filters · Feed
-
High 8.3
Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary acti…
-
High 7.3
Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers…
-
High 8.6
Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows…
-
High 8.6
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 a…
-
High 7.0
Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary cod…
-
High 8.9
Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary c…
-
High 7.0
Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary …
-
High 7.1
Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to e…
-
High 8.4
Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potent…
-
High 8.8
Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system …
-
High 8.6
Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code wit…
-
High 8.4
Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write ou…
-
High 7.0
Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept t…
-
High 7.2
Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands w…
-
High 8.4
Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execu…
-
High 7.0
Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability.
-
High 8.3
Out-of-bounds write in ImsService prior to SMR Jul-2026 Release 1 allows remote attackers to potentially execute arbitr…
-
High 8.5
Improper export of android application components in Bixby prior to version 4.0.70.8 allows local attackers to execute …
-
High 8.4
Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 allows local attackers to execute arbitrary c…
-
High 8.4
Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote…
-
High 8.4
Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privi…
-
High 8.4CVE-2026-21045 Public exploit
Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remot…
-
High 8.7
Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows remote attackers to execute arbitrary code.
-
High 8.9CVE-2026-21019 Public exploit
Improper input validation in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 allows local attacker to exe…
-
High 7.1CVE-2026-21005 Public exploit
Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with S…
-
High 7.0
Improper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Stor…
-
High 7.1
Authentication bypass by replay in Smart Switch prior to version 3.7.69.15 allows remote attackers to trigger privilege…
-
High 7.1
Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication.
-
High 7.1
Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to …
-
High 8.4
Improper export of android application components in Secure Folder prior to SMR Mar-2026 Release 1 allows local attacke…
-
High 8.7
Improper input validation in GalaxyDiagnostics prior to version 3.5.050 allows local privileged attackers to execute pr…
-
High 7.0
Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary UR…
-
High 8.4
Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attack…
-
High 7.0CVE-2026-20980 Public exploit
Improper input validation in PACM prior to SMR Feb-2026 Release 1 allows physical attacker to execute arbitrary command…
-
High 8.4
Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary ac…
-
High 7.3
Use After Free in PROCA driver prior to SMR Jan-2026 Release 1 allows local attackers to potentially execute arbitrary …
-
High 7.3
Improper access control in MPLocalService of MotionPhoto prior to version 4.1.51 allows local attackers to start privil…
-
High 7.3
Improper access control in MPRemoteService of MotionPhoto prior to version 4.1.51 allows local attackers to start privi…
-
High 7.1
Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL…
-
High 8.8
Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to …