CVE-2026-21061

Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering this vulnerability...

EUVD-2026-55085

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles...

CVE-2026-21060

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles...

CVE-2026-21058

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege...

CVE-2026-21058

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege...

EUVD-2026-55083

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege...

PT-2026-69386

Name of the Vulnerable Software and Affected Versions Samsung Contacts versions prior to SMR Aug-2026 Release 1 Description Improper input validation allows physical attackers to access data across multiple user profiles. Recommendations Update Samsung Contacts to SMR Aug-2026 Release 1...

PT-2026-69401

Name of the Vulnerable Software and Affected Versions Galaxy Themes versions prior to SMR Aug-2026 Release 1 Description Improper input validation allows physical attackers to launch arbitrary activity. Recommendations Update Galaxy Themes to SMR Aug-2026 Release 1...

CVE-2026-21083: Improper Input Validation

Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...

CVE-2026-21073: Undefined Security Weakness

Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity...

CVE-2026-21072: Improper Input Validation

Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21071: Improper Input Validation

Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21070: Improper Input Validation

Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information...

CVE-2026-21067: Undefined Security Weakness

Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21066: Improper Input Validation

Improper input validation in libcodec2secflacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21061: Improper Input Validation

Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering this vulnerability...

CVE-2026-21058: Improper Input Validation

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege...

PT-2026-69398

Name of the Vulnerable Software and Affected Versions Samsung Message versions prior to SMR Aug-2026 Release 1 Description Improper input validation allows physical attackers to access sensitive information. Recommendations Update Samsung Message to SMR Aug-2026 Release 1...

CVE-2026-21060: Improper Input Validation

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles...

CVE-2026-68154: Improper Input Validation

In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket types in crushdecode CRUSH bucket type 0 is reserved for devices. The mapper relies on that invariant and uses type 0 to identify leaf devices. If crushdecode accepts a bucket with type 0, a malformed...