CVE-2026-21108

Improper export of android application components in Bixby Touch prior to version 4.3.01.17 allows local attackers to access sensitive information...

CVE-2026-45527

creationtimestamp| type| source ---|---|--- 2026-09-09 04:47:57+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...

CVE-2026-45525

creationtimestamp| type| source ---|---|--- 2026-09-09 04:47:55+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...

CVE-2026-21105

Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information...

CVE-2026-21105

Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information...

EUVD-2026-74646

Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information...

CVE-2026-21105

An improper access control flaw in Samsung's Collection app on Android 15 (prior to version 1.0.1.14) and Android 16 (prior to version 2.0.02.7) allows local attackers to access sensitive information without requiring privileges or user interaction. The vulnerability is rated CVSS 4.0 5.9 (MEDIUM...

CVE-2026-21104

CVE-2026-21104 is a heap-based buffer overflow in the KnoxVault trustlet on Samsung mobile devices, affecting firmware prior to SMR Sep-2026 Release 1 . The flaw allows a local privileged attacker to achieve arbitrary code execution . The CVSS 4.0 base score is 7.1 (HIGH) , with a local attack ve...

CVE-2026-45521

creationtimestamp| type| source ---|---|--- 2026-09-09 04:47:52+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...

CVE-2026-21103

CVE-2026-21103 is a path traversal vulnerability in Samsung's GalaxyDiagnostics component, affecting versions prior to SMR Sep-2026 Release 1 . A physical attacker with no required privileges or user interaction can exploit this flaw to access files with system privilege , resulting in high confi...

CVE-2026-21102

This critical (CVSS 4.0: 9.3) vulnerability is a use-after-free in the DualDAR component of Samsung mobile devices, prior to the SMR September 2026 Release 1 . A local privileged attacker can leverage the flaw to execute arbitrary code with root privileges , resulting in high impact on confidenti...

CVE-2026-45520

creationtimestamp| type| source ---|---|--- 2026-09-09 04:47:50+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...

CVE-2026-21101

CVE-2026-21101 addresses an improper input validation flaw in the DualDAR driver on Samsung Mobile devices. The defect allows local privileged attackers to potentially execute arbitrary code with root privilege , resulting in high impact to confidentiality, integrity, and availability of the vuln...

CVE-2026-45519

creationtimestamp| type| source ---|---|--- 2026-09-09 04:47:48+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...

CVE-2026-21100

CVE-2026-21100 is an improper access control vulnerability in Samsung's SystemUI component. A local attacker with low privileges can exploit this flaw to launch arbitrary activity on the device, potentially gaining high confidentiality and integrity impact without affecting availability (NVD CVSS...

CVE-2026-21099

CVE-2026-21099 is an improper access control vulnerability in SettingsProvider on Samsung mobile devices. A local attacker with no privileges required and no user interaction can access sensitive information on the vulnerable system. The CVSS 4.0 base score is 5.1 (MEDIUM) , reflecting the local ...

CVE-2026-45518

creationtimestamp| type| source ---|---|--- 2026-09-09 04:47:46+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...

CVE-2026-21097

CVE-2026-21097 is an improper authentication flaw in Samsung Mobile's ActivityTaskManagerService , present prior to SMR Sep-2026 Release 1 . A local privileged attacker can exploit it to launch an arbitrary activity , resulting in low impact to confidentiality, integrity, and availability on the ...

CVE-2026-45517

creationtimestamp| type| source ---|---|--- 2026-09-09 04:47:44+00:00| seen| https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities20260909...

CVE-2026-21096

CVE-2026-21096 is a heap-based buffer overflow in the JPEG decoder of libimagecodec.quram.so in Samsung Mobile devices, prior to the SMR Sep-2026 Release 1 . The vulnerability allows remote attackers to execute arbitrary code, with no user interaction or privileges required, though the attack req...