304121 matches found
CVE-2026-21130
Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges...
CVE-2026-21132
Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability...
CVE-2026-21116
Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory...
CVE-2026-21118
Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage...
CVE-2026-21122
Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...
CVE-2026-21120
Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege...
CVE-2026-21119
Out-of-bounds read and write in libsagaisoundsepv2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory...
CVE-2026-21121
Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs...
CVE-2026-21124
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code...
CVE-2026-21115
Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory...
CVE-2026-21114
Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...
CVE-2026-108803
A security vulnerability exists in y_project RuoYi versions up to 4.8.3 . The flaw specifically impacts the changeStatus function within the /system/config/add file of the Disable API component. This vulnerability, categorized under CWE-613 (Insufficient Session Expiration) , allows an attacker t...
EUVD-2026-97237
A security vulnerability has been detected in yproject RuoYi up to 4.8.3. This impacts the function changeStatus of the file /system/config/add of the component Disable API. The manipulation leads to session expiration. It is possible to initiate the attack remotely. The vendor was contacted earl...
CVE-2026-108803 y_project RuoYi Disable API add changeStatus session expiration
A security vulnerability has been detected in yproject RuoYi up to 4.8.3. This impacts the function changeStatus of the file /system/config/add of the component Disable API. The manipulation leads to session expiration. It is possible to initiate the attack remotely. The vendor was contacted earl...
EUVD-2026-97203
Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device...
EUVD-2026-97202
Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications...
CVE-2026-21138
A vulnerability in Smart Switch (versions prior to 3.7.73 ) allows physical attackers to install arbitrary applications due to insufficient verification of data authenticity . The CVSS 4.0 score of 6.9 (Medium) reflects a physical attack vector requiring no user interaction. No specific exploit i...
CVE-2026-21138
Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications...
CVE-2026-21137
A path traversal vulnerability exists in Smart Switch prior to version 3.7.73 . This flaw allows physical attackers to access files with Smart Switch privilege . No specific exploit details or remediation steps are provided in the documents.