Vulnerabilities (CVE)

Filtered by vendor Samsung Subscribe
Total 1631 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-21037 1 Samsung 1 Notes 2026-06-17 N/A 4.1 MEDIUM
Improper access control in Samsung Notes prior to version 4.4.30.63 allows physical attackers to access data across multiple user profiles. User interaction is required for triggering this vulnerability.
CVE-2025-21036 1 Samsung 1 Notes 2026-06-17 N/A 5.0 MEDIUM
Improper access control in Samsung Notes prior to version 4.4.30.63 allows local privileged attackers to access exported note files. User interaction is required for triggering this vulnerability.
CVE-2025-21035 2 Google, Samsung 2 Android, Calendar 2026-06-17 N/A 4.6 MEDIUM
Improper access control in Samsung Calendar prior to version 12.5.06.5 in Android 14 and 12.6.01.12 in Android 15 allows physical attackers to access data across multiple user profiles.
CVE-2025-21034 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Out-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to potentially execute arbitrary code.
CVE-2025-21033 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Improper access control in ContactProvider prior to SMR Sep-2025 Release 1 allows local attackers to access sensitive information.
CVE-2025-21032 1 Samsung 1 Android 2026-06-17 N/A 5.9 MEDIUM
Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions.
CVE-2025-21031 1 Samsung 1 Android 2026-06-17 N/A 6.8 MEDIUM
Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs.
CVE-2025-21029 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Improper handling of insufficient permission in System UI prior to SMR Sep-2025 Release 1 allows local attackers to send arbitrary replies to messages from the cover display.
CVE-2025-21028 1 Samsung 1 Android 2026-06-17 N/A 5.5 MEDIUM
Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items.
CVE-2025-21027 1 Samsung 1 Android 2026-06-17 N/A 5.1 MEDIUM
Improper verification of intent by broadcast receiver in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to temporarily disable the SIM.
CVE-2025-21026 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Improper handling of insufficient permission in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to interrupt the call.
CVE-2025-21025 1 Samsung 1 Android 2026-06-17 N/A 5.1 MEDIUM
Improper access control in MARsExemptionManager prior to SMR Sep-2025 Release 1 allows local attackers to be excluded from background execution management.
CVE-2025-21022 1 Samsung 1 Galaxy Wearable 2026-06-17 N/A 3.3 LOW
Improper access control in Galaxy Wearable prior to version 2.2.63.25042861 allows local attackers to access sensitive information.
CVE-2025-21021 1 Samsung 1 Blockchain Keystore 2026-06-17 N/A 5.7 MEDIUM
Out-of-bounds write in drawing pinpad in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-of-bounds memory.
CVE-2025-21020 1 Samsung 1 Blockchain Keystore 2026-06-17 N/A 5.7 MEDIUM
Out-of-bounds write in creating bitmap images in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-of-bounds memory.
CVE-2025-21019 1 Samsung 1 Health 2026-06-17 N/A 5.5 MEDIUM
Improper authorization in Samsung Health prior to version 6.30.1.003 allows local attackers to access data in Samsung Health. User interaction is required for triggering this vulnerability.
CVE-2025-21018 1 Samsung 1 Blockchain Keystore 2026-06-17 N/A 4.4 MEDIUM
Out-of-bounds read in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to read out-of-bounds memory.
CVE-2025-21017 1 Samsung 1 Blockchain Keystore 2026-06-17 N/A 6.3 MEDIUM
Out-of-bounds write in detaching crypto box in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-of-bounds memory.
CVE-2025-21015 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document scanner's privilege.
CVE-2025-21014 1 Samsung 1 Android 2026-06-17 N/A 4.3 MEDIUM
Improper export of android application component in Emergency SoS prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information.