EUVD-2026-97202

Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications...

CVE-2026-21138

A vulnerability in Smart Switch (versions prior to 3.7.73 ) allows physical attackers to install arbitrary applications due to insufficient verification of data authenticity . The CVSS 4.0 score of 6.9 (Medium) reflects a physical attack vector requiring no user interaction. No specific exploit i...

CVE-2026-21137

Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege...

EUVD-2026-97201

Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege...

CVE-2026-21137

A path traversal vulnerability exists in Smart Switch prior to version 3.7.73 . This flaw allows physical attackers to access files with Smart Switch privilege . No specific exploit details or remediation steps are provided in the documents.

CVE-2026-21136

An improper authorization vulnerability exists in Smart Switch prior to version 3.7.73 . This flaw allows physical attackers to invoke the application restore process. No specific exploit details or in-the-wild exploitation links are provided in the documents. Remediation information is not speci...

EUVD-2026-97199

Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information...

EUVD-2026-97198

Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information...

CVE-2026-21134

Versions of Samsung Flow prior to 4.9.22.4 are susceptible to an improper authentication vulnerability. This flaw allows adjacent attackers to gain unauthorized access to sensitive information . No specific exploit details or remediation instructions are provided in the documents.

EUVD-2026-97197

Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data...

CVE-2026-21133

A path traversal vulnerability exists in Samsung Flow prior to version 4.9.22.1 . This flaw allows local attackers to gain unauthorized access to clipboard data . No specific exploit information or additional remediation steps are provided in the documents beyond the indicated version update.

CVE-2026-21132

A vulnerability in Samsung Internet prior to version 30.0.5.24 exists due to improper input validation . This flaw allows remote attackers to perform arbitrary script injection , which requires user interaction to trigger. No specific exploit details or direct links are provided in the documentat...

CVE-2026-21131

A vulnerability in Samsung Flow prior to version 4.9.22.4 exists due to an incorrect default permission . This flaw allows local attackers to launch an arbitrary activity with Samsung Flow privileges on a connected device. No specific exploit details or manual mitigation steps are provided in the...

EUVD-2026-97195

Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device...

CVE-2026-21130

Improper input validation in the CreditCardRetrieveActivity component of Samsung Checkout (versions prior to 5.1.03.1 ) allows local attackers to launch an arbitrary activity with Samsung Checkout privileges . No specific exploit details or remediation steps are provided in the documents.

CVE-2026-21129

Versions of Samsung Checkout prior to version 5.1.03.1 are vulnerable to a flaw in the GuestCreditCardRegisterActivity component. Due to improper input validation , a local attacker can launch an arbitrary activity with Samsung Checkout privileges. No specific exploit information or remediation s...

EUVD-2026-97193

Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges...

CVE-2026-21128

Improper input validation in the CreditCardRegisterActivity component of Samsung Checkout (prior to version 5.1.03.1 ) allows a local attacker to launch an arbitrary activity with Samsung Checkout privileges . No specific exploit code or in-the-wild exploitation details are provided in the docume...

EUVD-2026-97192

Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges...

CVE-2026-21127

The Samsung Account application, on versions prior to 15.7.01.1 , is vulnerable to an improper export of android application components . This flaw allows local attackers to gain unauthorized access to sensitive data . No specific exploit information or mitigation steps are provided in the docume...