Vulnerabilities (CVE)

Filtered by vendor Samsung Subscribe
Filtered by product Android
Total 475 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-21050 1 Samsung 1 Android 2026-06-17 N/A 7.1 HIGH
Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local attackers to access data across multiple user profiles.
CVE-2025-21049 1 Samsung 1 Android 2026-06-17 N/A 5.5 MEDIUM
Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.
CVE-2025-21048 1 Samsung 1 Android 2026-06-17 N/A 6.7 MEDIUM
Relative path traversal in Knox Enterprise prior to SMR Oct-2025 Release 1 allows local attackers to execute arbitrary code.
CVE-2025-21047 1 Samsung 1 Android 2026-06-17 N/A 5.2 MEDIUM
Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs.
CVE-2025-21046 1 Samsung 1 Android 2026-06-17 N/A 2.4 LOW
Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list.
CVE-2025-21044 1 Samsung 1 Android 2026-06-17 N/A 5.7 MEDIUM
Out-of-bounds write in fingerprint trustlet prior to SMR Oct-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVE-2025-21043 1 Samsung 1 Android 2026-06-17 N/A 8.8 HIGH
Out-of-bounds write in libimagecodec.quram.so prior to SMR Sep-2025 Release 1 allows remote attackers to execute arbitrary code.
CVE-2025-21042 1 Samsung 1 Android 2026-06-17 N/A 8.8 HIGH
Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.
CVE-2025-21041 1 Samsung 1 Android 2026-06-17 N/A 6.2 MEDIUM
Insecure Storage of Sensitive Information in Secure Folder prior to Android 16 allows local attackers to access sensitive information.
CVE-2025-21034 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Out-of-bounds write in libsavsvc.so prior to SMR Sep-2025 Release 1 allows local attackers to potentially execute arbitrary code.
CVE-2025-21033 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Improper access control in ContactProvider prior to SMR Sep-2025 Release 1 allows local attackers to access sensitive information.
CVE-2025-21032 1 Samsung 1 Android 2026-06-17 N/A 5.9 MEDIUM
Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions.
CVE-2025-21031 1 Samsung 1 Android 2026-06-17 N/A 6.8 MEDIUM
Improper access control in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to use the privileged APIs.
CVE-2025-21029 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Improper handling of insufficient permission in System UI prior to SMR Sep-2025 Release 1 allows local attackers to send arbitrary replies to messages from the cover display.
CVE-2025-21028 1 Samsung 1 Android 2026-06-17 N/A 5.5 MEDIUM
Improper privilege management in ThemeManager prior to SMR Sep-2025 Release 1 allows local privileged attackers to reuse trial items.
CVE-2025-21027 1 Samsung 1 Android 2026-06-17 N/A 5.1 MEDIUM
Improper verification of intent by broadcast receiver in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to temporarily disable the SIM.
CVE-2025-21026 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Improper handling of insufficient permission in ImsService prior to SMR Sep-2025 Release 1 allows local attackers to interrupt the call.
CVE-2025-21025 1 Samsung 1 Android 2026-06-17 N/A 5.1 MEDIUM
Improper access control in MARsExemptionManager prior to SMR Sep-2025 Release 1 allows local attackers to be excluded from background execution management.
CVE-2025-21015 1 Samsung 1 Android 2026-06-17 N/A 4.0 MEDIUM
Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document scanner's privilege.
CVE-2025-21014 1 Samsung 1 Android 2026-06-17 N/A 4.3 MEDIUM
Improper export of android application component in Emergency SoS prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive information.