CVE-2026-21129

Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges...

CVE-2026-21129

Versions of Samsung Checkout prior to version 5.1.03.1 are vulnerable to a flaw in the GuestCreditCardRegisterActivity component. Due to improper input validation , a local attacker can launch an arbitrary activity with Samsung Checkout privileges. No specific exploit information or remediation s...

EUVD-2026-97192

Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges...

CVE-2026-21128

Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout privileges...

CVE-2026-21128

Improper input validation in the CreditCardRegisterActivity component of Samsung Checkout (prior to version 5.1.03.1 ) allows a local attacker to launch an arbitrary activity with Samsung Checkout privileges . No specific exploit code or in-the-wild exploitation details are provided in the docume...

CVE-2026-21127

Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data...

EUVD-2026-97191

Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data...

CVE-2026-21127

The Samsung Account application, on versions prior to 15.7.01.1 , is vulnerable to an improper export of android application components . This flaw allows local attackers to gain unauthorized access to sensitive data . No specific exploit information or mitigation steps are provided in the docume...

CVE-2026-21126

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21125

Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code...

CVE-2026-21124

Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code...

EUVD-2026-97187

Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock...

CVE-2026-21122

Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...

EUVD-2026-97186

Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...

CVE-2026-21122

An out-of-bounds write vulnerability exists in libsamsungtts.so on Samsung Mobile devices prior to the SMR Oct-2026 Release 1 . This flaw allows local attackers to execute arbitrary code . Exploitation can occur locally, and the vulnerability is categorized under a broader set of Android security...

EUVD-2026-97185

Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs...

CVE-2026-21121

Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs...

CVE-2026-21121

A vulnerability exists in CmcCore prior to the SMR Oct-2026 Release 1 due to the improper handling of insufficient permissions . This flaw allows a local attacker to access and use privileged APIs . The impact of this vulnerability includes potential high confidentiality impact on the affected sy...

EUVD-2026-97184

Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege...

CVE-2026-21120

A Use after free vulnerability exists in the WSM service on devices running software prior to SMR Oct-2026 Release 1 . This flaw allows local attackers to potentially achieve arbitrary code execution with system privilege . While the NCSC notes broader Android vulnerabilities, this specific CVE i...