CVE-2026-21115

Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21114

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...

CVE-2026-108803

A security vulnerability exists in y_project RuoYi versions up to 4.8.3 . The flaw specifically impacts the changeStatus function within the /system/config/add file of the Disable API component. This vulnerability, categorized under CWE-613 (Insufficient Session Expiration) , allows an attacker t...

CVE-2026-108803 y_project RuoYi Disable API add changeStatus session expiration

A security vulnerability has been detected in yproject RuoYi up to 4.8.3. This impacts the function changeStatus of the file /system/config/add of the component Disable API. The manipulation leads to session expiration. It is possible to initiate the attack remotely. The vendor was contacted earl...

EUVD-2026-97237

A security vulnerability has been detected in yproject RuoYi up to 4.8.3. This impacts the function changeStatus of the file /system/config/add of the component Disable API. The manipulation leads to session expiration. It is possible to initiate the attack remotely. The vendor was contacted earl...

EUVD-2026-97203

Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device...

CVE-2026-21138

A vulnerability in Smart Switch (versions prior to 3.7.73 ) allows physical attackers to install arbitrary applications due to insufficient verification of data authenticity . The CVSS 4.0 score of 6.9 (Medium) reflects a physical attack vector requiring no user interaction. No specific exploit i...

EUVD-2026-97202

Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications...

CVE-2026-21138

Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications...

CVE-2026-21137

A path traversal vulnerability exists in Smart Switch prior to version 3.7.73 . This flaw allows physical attackers to access files with Smart Switch privilege . No specific exploit details or remediation steps are provided in the documents.

CVE-2026-21137

Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege...

EUVD-2026-97201

Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege...

CVE-2026-21136

An improper authorization vulnerability exists in Smart Switch prior to version 3.7.73 . This flaw allows physical attackers to invoke the application restore process. No specific exploit details or in-the-wild exploitation links are provided in the documents. Remediation information is not speci...

CVE-2026-21136

Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process...

EUVD-2026-97199

Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information...

CVE-2026-21135

Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information...

EUVD-2026-97198

Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information...

CVE-2026-21134

Versions of Samsung Flow prior to 4.9.22.4 are susceptible to an improper authentication vulnerability. This flaw allows adjacent attackers to gain unauthorized access to sensitive information . No specific exploit details or remediation instructions are provided in the documents.

CVE-2026-21134

Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information...

CVE-2026-21133

A path traversal vulnerability exists in Samsung Flow prior to version 4.9.22.1 . This flaw allows local attackers to gain unauthorized access to clipboard data . No specific exploit information or additional remediation steps are provided in the documents beyond the indicated version update.