CVE-2026-21112

CVE-2026-21112 is an improper input validation flaw in Samsung Tips prior to Android 17 . A local attacker with low privileges can launch an arbitrary activity with Samsung Tips privilege , resulting in high confidentiality impact on the vulnerable system. User interaction is required to trigger ...

EUVD-2026-74653

Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege. User interaction is required for triggering this vulnerability...

CVE-2026-21101

Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege...

CVE-2026-21101

CVE-2026-21101 addresses an improper input validation flaw in the DualDAR driver on Samsung Mobile devices. The defect allows local privileged attackers to potentially execute arbitrary code with root privilege , resulting in high impact to confidentiality, integrity, and availability of the vuln...

CVE-2026-21101

Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitrary code with root privilege...

CVE-2026-21094

Improper input validation in wpasupplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory...

EUVD-2026-74635

Improper input validation in wpasupplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory...

CVE-2026-21094

CVE-2026-21094 is an improper input validation flaw in wpa_supplicant on Samsung mobile devices, allowing an adjacent attacker to perform an out-of-bounds memory write . NVD scores it 8.8 (HIGH) under CVSS 3.1, while Samsung's own CNA rating is 6.1 (MEDIUM) under CVSS 4.0, reflecting higher attac...

CVE-2026-21089

Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21089

CVE-2026-21089 is an out-of-bounds memory write vulnerability in libsubextractor.so on Samsung mobile devices, caused by improper input validation when removing a style tag. A local attacker with low privileges can exploit it, potentially leading to high impact on confidentiality, integrity, and ...

CVE-2026-21089

Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21088

Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21088

CVE-2026-21088 is an improper input validation vulnerability in libsubextractor.so on Samsung mobile devices, triggered when loading a subtitle frame. The flaw allows a local attacker to perform an out-of-bounds memory write , potentially leading to high impact on confidentiality, integrity, and ...

CVE-2026-21088

Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-87553

A flaw was found in SiteIsolation in Google Chrome. Improper input validation could allow a remote attacker, who has already compromised the renderer process, to execute arbitrary code outside of the sandbox. This exploitation occurs when the attacker provides a specially crafted HTML page, leadi...

CVE-2026-87568

A flaw was found in Chromium. This improper input validation vulnerability allows a remote attacker, who has compromised the renderer process, to spoof user interface UI elements. This can be achieved by sending crafted network traffic, potentially deceiving users or leading to further attacks...

CVE-2026-87600

Improper input validation in Safebrowsing in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-87590

Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-87590

Improper input validation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via crafted network traffic. Chromium security severity: Medium...

DEBIAN-CVE-2026-87573

Improper input validation in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...